EIP-2026-109842

This exploit demonstrates an authenticated directory traversal vulnerability in Navigate CMS 2.8.7, allowing an attacker to read and write arbitrary files on the server. The PoC includes a payload to achieve remote code execution (RCE) by writing a malicious PHP file.