EIP-2026-103090

This exploit targets a command injection vulnerability in CoreHTTP server versions 0.5.3.1 and below due to improper input sanitization before passing user input to popen(). It allows remote command execution via crafted CGI requests.