EIP-2026-110000

This exploit demonstrates multiple authenticated OS command injection vulnerabilities in NUUO NVRmini, NVRmini2, Crystal, NVRSolo, and NVRTitan devices. The PoC includes HTTP requests that inject arbitrary shell commands via parameters in `handle_iscsi.php` and `cgi_system` endpoints, executing as root.