EIP-2026-119438

This exploit leverages a Splunk Enterprise 7.2.4 vulnerability to achieve persistent remote code execution by uploading a malicious custom app via the Splunk web interface. It uses Selenium to automate the login and upload process, embedding a custom binary payload in a tar.gz file.