EIP-2026-101770

This exploit demonstrates a CSRF vulnerability in Hikvision Digital Video Recorders, allowing an attacker to add an operator via a crafted HTTP request without proper validity checks. The PoC uses an HTML form to submit a malicious POST request to the target device.