EIP-2026-101531

This Metasploit module exploits a command injection vulnerability in ASUS TM-AC1900 routers by bypassing a patch for CVE-2018-9285 using percent-encoded newline characters. It executes arbitrary commands via the 'SystemCmd' parameter in '/apply.cgi' and delivers a payload through an HTTP server.