EIP-2026-101819

This exploit demonstrates an unauthenticated SQL injection vulnerability in KevinLAB BEMS 1.0, allowing authentication bypass via crafted POST requests. The PoC includes payloads for both SQLi extraction and direct bypass using boolean-based injection.