EIP-2026-101773

This exploit leverages an Insecure Direct Object Reference (IDOR) vulnerability in Hitachi NAS (HNAS) System Management Unit (SMU) to download backup archives without proper authorization. It sends a crafted GET request with valid session cookies to retrieve sensitive backup files.