EIP-2026-109926

This is a writeup describing an authentication bypass vulnerability in newPHP. The issue allows an attacker to bypass authentication by manipulating the 'nphp_users' parameter and providing a fake username and password.