EIP-2026-101777

This exploit demonstrates Cross-Site Request Forgery (CSRF) vulnerabilities in the HooToo Tripmate HT-TM01 admin web portal. It includes multiple proof-of-concept HTML forms to manipulate device settings, such as changing the hostname, WiFi security, and admin password, without requiring authentication.