EIP-2026-104196

This exploit leverages a Server-Side Template Injection (SSTI) vulnerability in changedetection.io <= 0.45.20 to achieve Remote Code Execution (RCE). It uses a multi-step process involving CSRF token extraction, form submission, and payload injection in the notification configuration to execute a reverse shell.