EIP-2026-114748

This exploit leverages an unauthenticated API endpoint in FUXA to execute arbitrary commands via a crafted JSON payload, resulting in a reverse shell. The payload uses Node.js's `child_process` module to spawn a bash shell connected to the attacker's host.