EIP-2026-101294

This exploit demonstrates an authentication bypass via Digest Authentication nonce reuse in GoAhead Web Server. It replays a captured authentication header to create an admin user without valid credentials.