EIP-2026-103065

This writeup describes a privilege escalation and information disclosure vulnerability in Apache suEXEC. By creating a symbolic link via a PHP script, an attacker can bypass suEXEC restrictions to read files owned by the Apache user.