EIP-2026-102004

The exploit demonstrates an authorization bypass vulnerability in Sitecom Home Storage Center devices, allowing an unauthenticated attacker to change the administrator password via a crafted HTTP request. The PoC uses a simple curl command to exploit the flawed cookie validation mechanism.