EIP-2026-101620

This advisory details an authentication bypass and remote command execution vulnerability in D-Link DCS cameras. It includes a Python deobfuscation script to extract the admin password from the configuration file, which can be accessed unauthenticated via a specific URL.