EIP-2026-104181

This exploit targets a backdoor in B-swiss 3 Digital Signage System <= 3.6.5, leveraging hardcoded credentials for the 'admin_m' account to authenticate and upload a malicious PHP file via the 'rec_poza' parameter, resulting in remote code execution.