EIP-2026-101891

This exploit demonstrates a command injection vulnerability in Netlink GPON Router 1.0.11 via the 'target_addr' parameter in the '/boaform/admin/formPing' endpoint. The PoC uses curl to inject a command ('ls /') and retrieves the directory listing as proof of execution.