EIP-2026-108512

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component 'com_record' by manipulating the 'controller' parameter to traverse directories and include arbitrary files (e.g., /etc/passwd). The PoC URL provided confirms the vulnerability's exploitability.