EIP-2026-101685

The exploit demonstrates a privilege escalation vulnerability in ECOA Building Automation System where user passwords are exposed in plain-text via the useredt.jsp page. It includes a curl command to retrieve sensitive credentials, confirming the flaw.