EIP-2026-113266

The exploit demonstrates a Blind SSRF vulnerability in Webedition CMS v2.9.8.8 by sending a crafted POST request to the `rpc.php` endpoint with a malicious URL in the `we_cmd[0]` parameter. The vulnerability allows an attacker to force the server to make arbitrary HTTP requests to internal or external resources.