EIP-2026-100776

This exploit demonstrates a directory traversal vulnerability in the Clear Voyager hotspot IMW-C910W device, allowing unauthorized file disclosure via a crafted HTTP request to the `getlog.cgi` endpoint. The PoC also discloses the superuser password hash stored in `/etc/httpd/super.htpasswd`.