EIP-2026-102984

The exploit demonstrates a command injection vulnerability in runAV (mod_security utility) due to unsanitized user input passed to sprintf and subsequently executed via run_cmd. The PoC shows arbitrary command execution by appending a command after a semicolon in the input argument.