EIP-2026-105414

This exploit leverages an authenticated RCE vulnerability in Batflat CMS <= 1.3.6 by injecting a PHP reverse shell payload into the 'fullname' field during user creation. The payload triggers when the user management page is accessed, establishing a reverse shell to the attacker's specified IP and port.