EIP-2026-104037

The exploit demonstrates an arbitrary file read vulnerability in Oracle Reports Server via a crafted HTTP GET request. The attack leverages the 'rwservlet' endpoint with manipulated parameters to disclose file contents, such as '/etc/passwd'.