EIP-2026-100775

This exploit demonstrates a CRLF injection vulnerability in CHIYU TCP/IP Converter devices (BF-430, BF-431, BF-450M) by injecting a malicious script via the 'redirect' parameter in a GET request. The payload bypasses input validation to execute arbitrary JavaScript in the HTTP response.