EIP-2026-102420

This is a functional CSRF exploit targeting Scopia XT Desktop 8.3.915.4, allowing an attacker to change the admin password via a crafted HTML form. The exploit leverages a lack of CSRF protection in the admin directory settings page.