EIP-2026-112790

This Metasploit module exploits an authentication bypass and command injection vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA). It extracts a JSESSIONID from a publicly accessible log file and uses it to execute arbitrary commands via a vulnerable PHP endpoint.