EIP-2026-104148

The document details hard-coded credentials and encryption keys in ABB Cylon Aspect BMS/BAS controller firmware <=3.08.03, exposing multiple instances of embedded secrets in Java classes. It provides specific examples of usernames, passwords, and keys but does not include functional exploit code.