EIP-2026-104354

This exploit demonstrates an information disclosure vulnerability in NEC Univerge SV9100/SV8100 WebPro 10.0, allowing unauthenticated attackers to download sensitive configuration files containing unencrypted credentials. The session ID can be brute-forced due to its predictable 5-digit format.