EIP-2026-113394

The exploit demonstrates an unauthenticated firmware upload vulnerability and a local file inclusion (LFI) vulnerability in Western Digital Arkeia Appliance v10.0.10. The LFI is triggered via a malformed cookie, allowing arbitrary file reads.