EIP-2026-110311

This exploit leverages an unauthenticated remote code execution vulnerability in OpenNetAdmin by injecting PHP code into the log file via the module description parameter. The log file is then included as a module, executing the injected code.