EIP-2026-110017

The exploit describes a directory traversal vulnerability in Octogate UTM's web interface, specifically in the `/scripts/download.php` script, which allows unauthenticated access to files outside the web root. The example request demonstrates how to retrieve sensitive configuration files using a crafted HTTP GET request.