EIP-2026-100838

This is a vulnerability disclosure for JVC IP-Camera (VN-T216VPRU) that allows unauthenticated remote disclosure of admin credentials via a simple HTTP request. The PoC demonstrates accessing a specific CGI endpoint to retrieve hardcoded credentials in JavaScript variables.