EIP-2026-103234

This exploit demonstrates an unauthenticated remote code execution vulnerability in Ucopia captive portal <= 5.1. It leverages command injection via the autoconnect_redirector.php script to create a PHP backdoor, then uses sudo privileges to execute arbitrary commands as root.