EIP-2026-102404

This exploit targets ManageEngine Exchange Reporter Plus <= 5310 by leveraging an unauthenticated RCE vulnerability in the `ADSHACluster` servlet. It sends a crafted request with a hex-encoded executable payload via the `BCP_EXE` parameter to execute arbitrary commands.