EIP-2026-103325

This exploit demonstrates a directory traversal vulnerability in Synology DiskStation Manager 4.1. By manipulating the 'lang' parameter in a GET request, an attacker can access arbitrary files on the system, such as '/etc/synoinfo.conf'.