EIP-2026-110695

This exploit leverages a file upload vulnerability in PHP F1 to bypass file extension restrictions and upload a malicious PHP shell. The attacker renames the shell to have a double extension (e.g., shell.php.pjpeg) to evade filters and then accesses it via the 'original' directory.