EIP-2026-101852

This exploit demonstrates multiple vulnerabilities in My Book World Edition NAS, including remote command execution via command injection in the NTP TIME SERVER field, XSS in multiple pages via the 'lang' parameter, and information disclosure through path exposure. The web server runs with root privileges, escalating the impact of these vulnerabilities.