EIP-2026-118774

The exploit demonstrates a directory traversal vulnerability in Mereo 1.9.1 by using URL-encoded sequences (%80../) to traverse directories and access arbitrary files. The provided URL path bypasses input sanitization, allowing attackers to read local files within the webserver's context.