EIP-2026-103587

The exploit demonstrates a remote stack-based format string vulnerability in the 'nsd' binary used by multiple OEM IP cameras. The PoC uses crafted HTTP requests with format string specifiers (%x, %p) to leak stack memory, confirming the vulnerability.