EIP-2026-101684

This exploit demonstrates a path traversal and arbitrary file upload vulnerability in ECOA Building Automation System. Attackers can abuse the 'rbt' and 'filename' POST parameters to write files to arbitrary locations, potentially leading to remote code execution.