EIP-2026-103062

This exploit leverages directory traversal in Apache James Server 2.3.2 to create a user with a malicious path, then sends an email to execute arbitrary commands via bash completion scripts. It requires default credentials (root/root) and targets the Remote Administration Tool and SMTP service.