EIP-2026-103178

This exploit demonstrates multiple command injection vulnerabilities in nbox 2.3 and 2.5, allowing remote code execution (RCE) via various CGI endpoints. Some RCEs are wrapped in sudo, enabling privilege escalation.