EIP-2026-118634

This exploit leverages a command injection vulnerability in HFS (HTTP File Server) 2.3.x via a malformed search parameter to execute a PowerShell reverse shell. The payload is base64-encoded and sent via a crafted HTTP GET request.