EIP-2026-105006

This exploit demonstrates a reflective XSS and a limited LFI vulnerability in Aerohive HiveOS versions 5.1r5 through 6.1r5. The XSS is triggered via a base64-encoded payload in the ERROR_INFO parameter, while the LFI allows reading specific files via the _page parameter.