EIP-2026-101572

This exploit demonstrates an information disclosure vulnerability in Brickcom IP cameras, allowing a low-privilege user to retrieve all user credentials and configurations via a simple GET request to the users.cgi endpoint. The vulnerability is exacerbated by default credentials that are rarely changed.