EIP-2026-101735

This exploit demonstrates an unauthenticated arbitrary file disclosure vulnerability in FLIR AX8 Thermal Camera firmware versions 1.32.16 and 1.17.13. The vulnerability allows an attacker to read sensitive files by manipulating the 'file' parameter in the download.php script.