EIP-2026-109693

This exploit leverages an unsanitized input vulnerability in MyBB's language editor to inject PHP code into a language file, achieving remote code execution. It requires admin credentials and demonstrates a full exploit chain from authentication to command execution.