EIP-2026-112602

This exploit targets Terramaster TOS 4.2.X (4.2.15-2107141517) and achieves unauthenticated remote code execution (RCE) via multiple injection points in the web interface. It also includes functionality to create admin users and download files.