EIP-2026-107232

This exploit targets FreePBX 13 and 14 (System Recordings Module versions 13.0.1beta1 - 13.0.26) to achieve remote command execution and privilege escalation to root. It uploads a malicious PHP file via a vulnerable endpoint and establishes a reverse TCP shell.