EIP-2026-107172

This exploit leverages an authenticated file upload vulnerability in FOGProject 1.5.9 to achieve remote code execution. The attacker uploads a malicious PHP file disguised as a kernel image, which is then executed via a crafted URL.