EIP-2026-111695

This exploit demonstrates an arbitrary file upload vulnerability in rConfig 3.9.6, allowing authenticated users to upload a malicious PHP file via the 'vendorLogo' parameter in a multipart/form-data POST request, leading to remote code execution (RCE). The uploaded file can be accessed without authentication, enabling command execution via GET parameters.