EIP-2026-113447

The vulnerability involves an information disclosure flaw in Wiser 2.10, where insufficient validation of user-supplied data allows attackers to download backup files containing sensitive information. The exploit leverages a direct path to a backup download script without proper authentication checks.