EIP-2026-104180

This is a functional CSRF exploit for B-swiss Digital Signage System 3.6.5 that adds a maintenance admin user via a crafted HTTP request. The exploit uses JavaScript to send a multipart/form-data POST request to the vulnerable endpoint, bypassing CSRF protections.