EIP-2026-110007

This is a CSRF exploit for Observium Commercial that allows an attacker to change the administrator password without requiring the old password due to lack of CSRF protection.