EIP-2026-105564

The exploit demonstrates a local file inclusion (LFI) vulnerability in Blur6ex 0.3.462 by manipulating the 'shard' parameter in the URL to traverse directories and include arbitrary local files. The null byte (%00) is used to terminate the file path, bypassing any appended extensions or restrictions.