EIP-2026-111803

This exploit leverages a file disclosure vulnerability in Roundcube Webmail by manipulating the `_timezone[files][1][path]` parameter during login to read arbitrary files. The exploit then retrieves the file content via a settings endpoint.