EIP-2026-101511

This is a writeup describing a data disclosure vulnerability in Aastra IP Phone web interface, allowing unauthenticated access to SIP credentials via specific URLs. No exploit code is provided, only documentation of the issue.