EIP-2026-110277

This exploit targets OpenCATS 0.9.4 and earlier, leveraging a file upload vulnerability to achieve remote code execution (RCE) by uploading a malicious PHP file disguised as a GIF. It interacts with the target via cURL to upload the payload and execute commands.