EIP-2026-102816

This exploit leverages the Dell EMC RecoverPoint boxmgmt CLI to perform arbitrary file reads by abusing the SSH command's configuration file option. The PoC demonstrates reading /etc/passwd by passing it as a configuration file to SSH, which outputs the file contents as error messages.