EIP-2026-102040

This exploit demonstrates a persistent XSS vulnerability in Tenda, Dlink, and Tplink TD-W8961ND routers. The PoC involves injecting a malicious payload into the DHCP hostname field, which executes when viewed in the router's DHCP client list.