EIP-2026-104277

The exploit demonstrates an application logic flaw in i3 International Annexxus Cameras, allowing privilege escalation by manipulating user permissions via PUT and DELETE requests. It bypasses server-side validation to create a second administrator account or delete existing ones.