EIP-2026-102261

This advisory details a local file include vulnerability in My.WiFi USB Drive v1.0 iOS, where the `filename` parameter in the `Upload Files` module allows remote attackers to include local files or system paths. The vulnerability is exploited via a POST request with a crafted filename, leading to unauthorized file inclusion in the index file directory listing.