EIP-2026-102255

This advisory details a directory traversal vulnerability in Lock Photos Album&Videos Safe v4.3, allowing unauthorized file access via manipulated path parameters in the `PRE` parameter of the WiFi web-server interface. The PoC demonstrates accessing arbitrary files, including the SQLite database, without authentication.