EIP-2026-109824

This exploit leverages an authenticated command injection vulnerability in Nagios XI 5.6.12 via the 'export-rrd.php' script. The payload is injected into the 'step' parameter, allowing arbitrary command execution.