EIP-2026-103870

The exploit demonstrates a Server-Side Include (SSI) injection vulnerability in Axis cameras, allowing remote command execution and file reading via crafted HTTP requests. The PoC includes commands for a reverse shell and reading /etc/shadow.