EIP-2026-101514

This exploit leverages a local file inclusion (LFI) vulnerability in AeroHive AP340 HiveOS < 6.1r5 by injecting PHP code into the login page, which poisons the log file at /var/log/messages. It then uses the LFI to execute arbitrary commands, specifically changing the root password for SSH access.