EIP-2026-101402

The exploit demonstrates an unauthenticated file disclosure vulnerability in Osprey Pump Controller 1.0.1 by leveraging the 'eventFileSelected' GET parameter to read arbitrary files, such as /etc/passwd, without authentication.