EIP-2026-119443

This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in Tautulli 2.1.9, allowing an unauthenticated attacker to shut down the remote media server via a simple HTTP GET request to the '/shutdown' endpoint. The PoC includes a Python script and an HTML form to trigger the shutdown.