EIP-2026-107629

This exploit leverages a client-side JavaScript injection to set an administrative cookie ('adm=1'), bypassing authentication in Host Directory PRO. The vulnerability arises from improper credential validation, allowing privilege escalation to administrative access.