EIP-2026-104321

This exploit demonstrates a CSV injection vulnerability in ManageEngine ADSelfService Plus 6.1, where a malicious payload is injected into the 'j_username' parameter during login. When an admin exports the audit report as CSV, the payload executes, leading to remote code execution (RCE).