EIP-2026-102110

This Metasploit module exploits an authenticated RCE vulnerability in Wago PFC200 devices (firmware <= 11). It authenticates as admin, modifies sudoers to allow PHP execution as root, and delivers a Meterpreter payload via PHP command injection.