EIP-2026-106457

This exploit demonstrates multiple CSRF vulnerabilities in DirectAdmin 1.34.4, allowing unauthorized actions such as adding/deleting subdomains, emails, and databases via crafted HTML forms or image tags. The PoC includes clear examples of malicious requests that can be triggered without user interaction.