EIP-2026-102138

The exploit demonstrates an insecure direct object reference vulnerability in ZTE ZXDSL 831CII modems, allowing authentication bypass by accessing CGI files directly without HTTP Basic authentication. This grants unauthorized access to sensitive functions like password changes and configuration uploads.