EIP-2026-109998

This is a CSRF exploit that adds an admin user to NUUO NVRmini 2 devices by submitting a crafted form to the vulnerable endpoint. It leverages lack of CSRF protection to perform unauthorized administrative actions.