EIP-2026-101401

This exploit demonstrates a session token prediction vulnerability in Osprey Pump Controller 1.0.1 due to weak session token generation and clear-text transmission. It allows session hijacking via predictable session codes derived from username, password, IP, and hostname.