EIP-2026-104136

The vulnerability involves directory traversal in Xinkaa WEB Station, allowing attackers to access sensitive system files via crafted HTTP requests. The exploit leverages path traversal sequences (e.g., ../../../) to bypass intended access restrictions.