EIP-2026-117672

This exploit demonstrates weak password encryption in NEOWISE CarbonFTP 1.4, where passwords are stored with a hardcoded key ('97F'). The PoC decrypts stored passwords from configuration files by reversing the proprietary encryption algorithm.