EIP-2026-101629

The exploit demonstrates Open Redirection and XSS vulnerabilities in D-Link DIR-615 routers via crafted POST requests to 'apply.cgi' and 'ping_response.cgi'. The PoC uses HTML forms with hidden inputs to trigger the vulnerabilities when the form is auto-submitted via an image error handler.