EIP-2026-101578

The writeup details two vulnerabilities in Buffalo TeraStation TS-Series firmware <= 1.5.7: an unauthenticated arbitrary file download via sync.cgi and an authenticated command injection via dynamic.pl. Technical specifics include request formats, affected endpoints, and privilege escalation to root.