EIP-2026-103814

The vulnerability involves SmartFoxServer 2X storing sensitive credentials in an unencrypted XML file (/config/server.xml), allowing local attackers with session access to disclose plain-text credentials. The writeup includes technical details such as file paths, affected versions, and proof of credential exposure via command-line examples.