EIP-2026-101115

This advisory details two stack-based buffer overflow vulnerabilities in Zhone GPON devices, exploitable via HTTP GET or POST requests with oversized filenames. The writeup includes technical details on the attack vectors and affected versions.