EIP-2026-103763

This document describes multiple local command/path injection vulnerabilities in Air Gallery 1.0 Air Photo Browser for iOS. The vulnerabilities allow attackers to inject malicious commands via the `devicename` and `album name` parameters, leading to unauthorized command execution or path requests.