EIP-2026-102807

This exploit leverages a local file include vulnerability in cPanel's openwebmail package by manipulating environment variables to execute arbitrary Perl scripts with root privileges via the setuid 'oom' script. It creates a malicious Perl script in /tmp and triggers its execution to spawn a rootshell.