EIP-2026-108396

This exploit leverages a file upload vulnerability in Joomla's com_jfuploader component (versions < 2.12) by disguising a PHP payload as a GIF file. The attacker uploads a maliciously crafted file with a .php.gif extension, bypassing file type restrictions to achieve remote code execution.