EIP-2026-106228

This exploit leverages a deserialization vulnerability in Craft CMS (CVE-2023-41892) to achieve unauthenticated remote code execution. It first extracts configuration details via phpinfo(), then deploys a webshell by manipulating Imagick file operations.