EIP-2026-111692

This exploit demonstrates an unauthenticated remote code execution (RCE) vulnerability in rConfig 3.9.5. It leverages user creation or enumeration to bypass authentication, then executes arbitrary commands via unsafe calls to `exec()` or template manipulation.