EIP-2026-104112

This exploit demonstrates a remote command execution (RCE) vulnerability in Uniview devices via crafted HTTP requests to the `main-cgi` endpoint. The PoC leverages command injection in the `stSelNicName` parameter to execute arbitrary commands (e.g., copying `/etc/shadow`) and exfiltrate results via packet capture functionality.