EIP-2026-109116

This exploit demonstrates arbitrary file read, write, and delete vulnerabilities in LibreHealth 2.0.0 via authenticated POST requests to the `import_template.php` endpoint. The PoC includes clear examples of LFI and file manipulation attacks.