Wow, how did this not get discovered and fixed at the time of:

https://www.cve.org/CVERecord?id=CVE-2007-0882

Might be a 32 year old bug, but it's practically also a 19 years old exploit?

Ed: I'm confusing TFA with

https://nvd.nist.gov/vuln/detail/cve-2026-24061

Which seems pretty much identical with the 2007 cve.