EIP-2026-102411

This exploit demonstrates a CSRF vulnerability in N-central by crafting a malicious image tag that submits an administrative request to add a new account. The attack leverages the lack of CSRF tokens in the application, allowing unauthorized account creation.