EIP-2026-102140

This HTML-based exploit demonstrates an authentication bypass vulnerability in ZTE ZXHN H108N routers, allowing unauthenticated download of the device configuration via a crafted POST request. The exploit leverages the lack of credential validation on the /getpage.gch endpoint.