EIP-2026-101804

The exploit demonstrates unauthenticated remote command execution in InfraPower PPS-02-S Q213V1 via multiple PHP scripts that improperly sanitize POST parameters, allowing arbitrary system commands to be executed as root.