EIP-2026-113059

This HTML-based PoC exploits an authentication bypass vulnerability in VHCS (version <= 2.4.7.1) by creating a new admin user via a crafted POST request to the add_user.php endpoint. The exploit uses JavaScript to submit the form and requires no prior authentication.