EIP-2026-102449

This exploit leverages an authenticated command injection vulnerability in Untangle NGFW's JSON-RPC interface, specifically targeting the `execEvil()` method in the `execManager` object to achieve root-level remote code execution. It authenticates, retrieves a nonce and objectID, then sends a malicious payload to execute a reverse shell.