EIP-2026-103209

This exploit leverages a timing-based information disclosure vulnerability in Qpopper to determine valid usernames. It measures the delay between authentication attempts to infer whether a username exists on the system.