EIP-2026-119289

This exploit demonstrates a path traversal vulnerability in WinTFTP Pro Server v3.1, allowing an attacker to read and write files outside the intended directory using the GET and PUT commands with relative path sequences (e.g., ../../). The proof-of-concept shows successful retrieval of the boot.ini file from a Windows XP system.