EIP-2026-105491

This exploit leverages authenticated access to Bitrix24's admin interface to execute arbitrary commands via the `php_command_line` endpoint. It first authenticates, extracts a session ID, and then sends system commands wrapped in a PHP `system()` call.