EIP-2026-113290

This exploit targets WebHMI 4.1.1.7662, leveraging authenticated remote code execution via command injection in the backup.php endpoint. It writes a PHP shell to the target and triggers a reverse shell using netcat.