EIP-2026-101889

This exploit leverages a command injection vulnerability in Netis WF2419 routers by sending a crafted POST request to the `netcore_set.cgi` endpoint, allowing remote code execution. The payload injects commands via the `tools_ip_url` parameter, and the results are retrieved from `netcore_get.cgi`.