EIP-2026-102128

This exploit demonstrates a command injection vulnerability in Xfinity Gateway's network diagnostic tools. The `destination_address` parameter in a POST request to `/actionHandler/ajax_network_diagnostic_tools.php` allows arbitrary command execution, as shown by injecting a ping command to an attacker-controlled IP.