EIP-2026-104193

This exploit demonstrates an authenticated remote command injection vulnerability in Cayin Content Management Server 11.0 via the 'NTP_Server_IP' parameter in system.cgi. The PoC uses a crafted HTTP POST request to inject a command that triggers a wget request to an external server, confirming command execution.