EIP-2026-102477

The exploit demonstrates CRLF injection and SSRF vulnerabilities in ManageEngine Desktop Central 9.1.0. The CRLF injection allows arbitrary HTTP header injection via the fileName parameter, while the SSRF can be used to probe internal resources or trigger malicious requests.