EIP-2026-101936

This is a technical writeup detailing a path injection vulnerability in QNAP Turbo NAS devices. It describes how authenticated users can exploit the '/cgi-bin/filemanager/utilRequest.cgi' endpoint to access, delete, or modify system files, including sensitive files like '/etc/shadow'.