EIP-2026-101537

This exploit describes an incorrect access control vulnerability in AUO Solar Data Recorder where plaintext credentials are exposed in the WWW-Authenticate header when accessing files under the /protect/ path. Attackers can use these credentials to bypass authentication.