EIP-2026-104040

The exploit demonstrates a remote code execution vulnerability in Oracle Secure Backup 10g by leveraging a variable poisoning attack in the PHP-based frontend, allowing arbitrary command execution via the 'rbtool' parameter without authentication.