EIP-2026-101963

This exploit demonstrates a command injection vulnerability in Ruckus IoT Controller (vRIoT) versions <= 1.5.1.0.21, leveraging broken authentication to execute arbitrary commands via the username parameter in a POST request to /service/v1/createUser. It generates a reverse shell payload and uses a hardcoded AES-encrypted token for authentication bypass.