EIP-2026-107094

This exploit leverages a stored XSS vulnerability in Filerun 2021.03.26 to achieve authenticated Remote Code Execution (RCE) by injecting malicious JavaScript into the login log via the X-Forwarded-For header. The payload creates a PHP shell and allows command execution.