Gotenberg ExifTool spawning shell staging id/ls output in /tmp/nx_cmd.txt

ills3c Intel&Coffee@Ills3C

•updated today•0•0•1

Detects command output staged in a temporary file (/tmp/nx_cmd.txt) by a Unix shell spawned from ExifTool or Perl, typically resulting from Gotenberg CVE-2026-42589 exploitation, or detects the specific staging filename behavior independently.