EIP-2026-101678

The exploit demonstrates a CSRF vulnerability in ECOA Building Automation System, allowing unauthorized CRUD operations such as user creation or alarm disarm via crafted HTTP requests. The PoC includes a functional HTML form that submits a malicious request to the target system.