EIP-2026-101540

This exploit leverages the Shellshock vulnerability (CVE-2014-6271) in Avaya Aura Communication Manager 5.2 to achieve remote code execution via a crafted User-Agent header. It spawns a reverse shell to an attacker-controlled IP and port.