EIP-2026-101892

This exploit demonstrates a command injection vulnerability in Netlink XPON 1GE WiFi V2801RGW firmware V3.3.0-190627. The `target_addr` parameter in the ping form is vulnerable to command injection via the `|` character, allowing remote command execution without authentication.