EIP-2026-101313

The exploit demonstrates a Remote File Inclusion (RFI) vulnerability in Hughes Satellite Router HX200 v8.3.1.14 by injecting a malicious URL into the router's speedtest.html page via cross-frame scripting. The PoC uses JavaScript to dynamically include an external file (XSS.svg) from a remote server, potentially leading to sensitive information theft.