EIP-2026-111866

The exploit describes an information disclosure vulnerability in SAFE TEAM Regulus where password hashes are exposed in a hidden tag on the 'Update Your Password' page. An attacker can retrieve these hashes by manipulating the 'userid' parameter in the URL.