EIP-2026-110517

This exploit targets PBLang <= 4.65 by injecting a command into the 'loc' parameter during a profile update, leveraging insufficient input validation to achieve remote command execution. It requires valid user credentials and a session cookie.