EIP-2026-101763

This exploit leverages a time-based SQL injection vulnerability in Grandstream UCM6200 Series WebSocket to disclose user passwords by brute-forcing character by character. It uses WebSocket communication to inject malicious SQL queries and measures response times to infer password characters.