EIP-2026-101824

This exploit demonstrates an authenticated command injection vulnerability in KZTech/JatonTec/Neotel JT3500V 4G LTE CPE devices. The vulnerability allows arbitrary command execution via the 'pingAddr' parameter in the 'start_ping' endpoint, bypassing input validation.