EIP-2026-104727

This exploit targets FreePBX < 13.0.188 via insufficient input sanitization in the Hotelwakeup module, allowing unauthenticated remote command execution by manipulating the 'destination' and 'language' parameters to write malicious PHP code to a .call file, which is then executed by the server.