EIP-2026-109125

This exploit demonstrates authenticated remote command execution (RCE) in LifeSize UVC 1.2.6 via command injection in the diagnose/ping, diagnose/trace, and diagnose/dns endpoints. The payload is injected into the destination_ip parameter, resulting in command execution as the www-data user.