EIP-2026-118223

The exploit describes an authentication bypass vulnerability in Abyss Web Server versions prior to 1.2. By appending a period ('.' or '%2e') to a URL, an attacker can bypass password protection on directories when the server is installed on a Linux system running FAT32.