EIP-2026-103108

This exploit leverages a command injection vulnerability in Exim's sender_address parameter to execute arbitrary commands via SMTP. It downloads and executes a Perl reverse shell script, achieving remote code execution (RCE).