EIP-2026-101834

This exploit leverages an unauthenticated command injection vulnerability in the Linksys RE6500 web interface by injecting commands into the 'admpass' parameter of the '/goform/setSysAdm' endpoint. It demonstrates RCE by saving the device password and enabling a telnet service.