EIP-2026-109892

This exploit leverages an arbitrary file upload vulnerability in Netsweeper 4.0.9, allowing an authenticated admin to upload and execute a malicious shell script with root privileges. The script creates a backdoor PHP shell, adds a new user with sudo privileges, and exfiltrates /etc/shadow via netcat.