EIP-2026-101534

This exploit describes an authentication bypass vulnerability in ATCOM PBX systems (IP01, IP08, IP4G, and IP2G4A) due to improper cookie validation. The system checks for the presence of a 'username' cookie without verifying its authenticity, allowing an attacker to set 'username=admin' and gain administrative access.