EIP-2026-102506

This exploit targets MeshCMS v3.5, leveraging a CSRF vulnerability to add a privileged user and a design flaw allowing remote code execution during backup operations. It provides an interactive shell with root privileges when deployed under Tomcat.