EIP-2026-102965

This exploit leverages a path manipulation vulnerability in QNX PPoEd to execute arbitrary commands with elevated privileges. By placing a malicious 'mount' script in /tmp and manipulating the PATH environment variable, the attacker tricks PPoEd into executing the script as root, resulting in a root shell.