EIP-2026-104065

The vulnerability involves an information disclosure flaw in SAFE TEAM Regulus, where an unauthenticated attacker can access the 'stafffile' file containing staff usernames and password hashes. This can be exploited by directly requesting the file via a predictable URL path.