EIP-2026-110581

This exploit bypasses authentication in Pheap 2.0 by manipulating the 'pheap_login' cookie to execute arbitrary commands or disclose credentials. It leverages a design flaw in the session validation mechanism.