EIP-2026-119106

This Metasploit module exploits an unauthenticated remote code execution vulnerability in SAP ConfigServlet by sending a crafted GET request with a command injection payload. The exploit uses a VBS-based command stager to execute arbitrary commands on the target system.