EIP-2026-101398
PRE-CVEOsprey Pump Controller 1.0.1 - Administrator Backdoor Access
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-101398. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit reveals a hardcoded backdoor administrative account ('admin' with password 'Mirage1234') in the Osprey Pump Controller 1.0.1, allowing unauthorized access to the web management interface. The vulnerability is confirmed by decompiled code from the Mirage_ValidateSessionCode.x binary, showing the hardcoded credentials.
Description
Osprey Pump Controller 1.0.1 - Administrator Backdoor Access
Exploits (1)
The exploit reveals a hardcoded backdoor administrative account ('admin' with password 'Mirage1234') in the Osprey Pump Controller 1.0.1, allowing unauthorized access to the web management interface. The vulnerability is confirmed by decompiled code from the Mirage_ValidateSessionCode.x binary, showing the hardcoded credentials.