EIP-2026-106584

This exploit targets a deserialization vulnerability in the Drupal 7.x Services module to achieve remote code execution. It leverages SQL injection to extract cached data and admin credentials, then manipulates the cache to write a malicious PHP file.