EIP-2026-101406

This exploit leverages an arbitrary script injection vulnerability in Palm WebOS's email application to read the /etc/passwd file and exfiltrate its contents to an attacker-controlled server via XMLHttpRequest. The vulnerability arises from insufficient input sanitization in versions prior to WebOS 1.2.