EIP-2026-101925

This is a writeup describing a data disclosure vulnerability in Polycom IP Phone web interfaces. It explains how an attacker can retrieve SIP credentials, including passwords, by accessing a specific URL without authentication.