EIP-2026-101164

This is a detailed technical writeup describing an authentication bypass vulnerability in Auerswald COMfortel IP phones. The vulnerability allows unauthenticated access to administrative functions by prefixing API endpoints with '/about/../'.