EIP-2026-101250
PRE-CVEDelta Controls enteliTOUCH 3.40.3935 - Cookie User Password Disclosure
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-101250. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates an information leakage vulnerability in Delta Controls enteliTOUCH where sensitive credentials are transmitted and stored in cleartext within HTTP cookies. The PoC includes a crafted HTTP request that retrieves a cookie containing a password and other sensitive data, which can be intercepted via a man-in-the-middle attack.
Description
Delta Controls enteliTOUCH 3.40.3935 - Cookie User Password Disclosure
Exploits (1)
This exploit demonstrates an information leakage vulnerability in Delta Controls enteliTOUCH where sensitive credentials are transmitted and stored in cleartext within HTTP cookies. The PoC includes a crafted HTTP request that retrieves a cookie containing a password and other sensitive data, which can be intercepted via a man-in-the-middle attack.