EIP-2026-106980

This exploit targets a local file inclusion vulnerability in eXtreme-fusion 4.02, allowing remote code execution by leveraging improper input sanitization in the 'locale' parameter and file upload functionality. The PoC includes authentication and command execution capabilities.