EIP-2026-103027

This exploit leverages a command injection vulnerability in Vesta Control Panel's 'v-get-web-domain-value' script, which is executable via sudo without a password for the 'admin' user. It injects a malicious command to create a SUID shell, escalating privileges from the admin user to root.