EIP-2026-101781

The exploit demonstrates a CSRF vulnerability in Huawei Flybox B660 routers, allowing unauthenticated remote attackers to reboot the device via a crafted POST request to `/htmlcode/html/reboot.cgi`. The PoC includes a functional HTML form that auto-submits to trigger the reboot.