EIP-2026-106901

This exploit demonstrates a CSV injection vulnerability in ERPGo SaaS 3.9, where a malicious payload is injected into a vendor name field, leading to arbitrary command execution when the CSV is opened in Excel.