This is a fun write-up. [@da_667](https://infosec.exchange/@da_667 ) it's not something you can write sigs for but you might find it interesting anyway.
https://tantosec.com/blog/2026/04/route-to-root-in-4g-industrial-router/
H / T buherator (npub17wv…nag2)