EIP-2026-101399

This exploit demonstrates an authentication bypass vulnerability in Osprey Pump Controller v1.0.1 by modifying user credentials via unauthenticated HTTP requests to the 'setSystemText.php' endpoint. It creates a new user account with specified credentials by manipulating 'USERNAME3' and 'USERPW3' system strings.