EIP-2026-104097

The vulnerability in TCLHttpd allows directory traversal due to inadequate input validation, enabling attackers to view arbitrary directory contents via a crafted URL. The exploit leverages the 'pattern' and 'sort' parameters to bypass restrictions.