EIP-2026-111985

This exploit targets Sentrifugo 3.2, leveraging an authenticated file upload vulnerability in the 'announcements' feature to achieve remote code execution. It uploads a PHP shell disguised as an image, then triggers it to establish a reverse shell.