EIP-2026-101897

This is a writeup describing an authentication bypass vulnerability in NPM-V (Network Power Manager) versions <= 2.4.1. The vulnerability allows unauthenticated access to management console pages, including user addition and password changes.