EIP-2026-110762

The exploit demonstrates a Local File Inclusion (LFI) and Remote File Inclusion (RFI) vulnerability in PHP SETI@home web monitor (phpsetimon) due to improper input validation in the `ps_cfg_langfiles` parameter. The vulnerability allows an attacker to include arbitrary local or remote files, potentially leading to remote code execution.