EIP-2026-106518

This exploit demonstrates an authenticated remote code execution (RCE) vulnerability in Dolibarr ERP-CRM 12.0.3 by injecting a malicious payload into the 'zipfilename_template' parameter during a backup generation request, leveraging command injection via the '--use-compress-program' option in tar.