EIP-2026-101676

This exploit demonstrates a directory traversal vulnerability in Eaton Intelligent Power Manager 1.6. By manipulating the 'firmware' parameter in a GET request, an attacker can access arbitrary files on the target system, such as '/windows/System32/drivers/etc/host'.