EIP-2026-101771

This Metasploit module exploits an unauthenticated backdoor in Hikvision IP cameras to retrieve plain-text passwords for all configured users by sending a crafted GET request to the '/System/configurationFile' endpoint with a hardcoded authentication bypass.