EIP-2026-110238

This exploit demonstrates an arbitrary file download vulnerability in Open STA Manager 2.3 via a path traversal attack in the backup module. The PoC includes a crafted HTTP request to download sensitive files like `win.ini` by manipulating the `file` parameter.