EIP-2026-100917

The exploit demonstrates directory traversal via null byte injection in a CGI script, allowing unauthorized access to sensitive files like /etc/passwd. The PoC provides example URLs targeting a vulnerable CGI endpoint.