EIP-2026-100084

The vulnerability involves an information disclosure flaw in .netCART, where a default installation exposes sensitive data (including authentication credentials) via an unprotected XML file. The exploit is trivial, requiring only a direct HTTP request to the exposed file.