EIP-2026-102236

The exploit demonstrates a file include and arbitrary file upload vulnerability in Flux Player v3.1.0 iOS. It shows how an attacker can upload files with manipulated names or multiple extensions to bypass validation and execute unauthorized file access or path traversal.