EIP-2026-101762

The writeup describes multiple vulnerabilities in the Grandstream GXV3275 VoIP phone, including a default SSH key backdoor, command injection via CLI commands, an undocumented command execution API, and privilege escalation via cookie manipulation.