EIP-2026-119019

The vulnerability involves Pablo FTP Service storing user account passwords in plaintext within a 'users.dat' file, which can be accessed remotely via FTP. This is an information disclosure issue rather than an active exploit.