EIP-2026-103999

The exploit demonstrates an SQL injection vulnerability in Nagios XI's admin/users.php page, allowing an attacker to extract user passwords by manipulating the 'records' parameter. The payload uses CHR concatenation to bypass basic filters and retrieve the password for the 'nagiosadmin' user.