EIP-2026-104285

The advisory describes an arbitrary file download vulnerability in InterScan Web Security Virtual Appliance 5.0 due to improper path validation in the 'exportreport' and 'ConfigBackup' servlets, allowing path traversal via the 'exportname' and 'pkg_name' parameters. The document provides technical details but does not include functional exploit code.