EIP-2026-119328

The exploit demonstrates a directory traversal vulnerability in Yawcam by sending HTTP GET requests with traversal sequences to access files outside the web root, such as 'system.ini'. The vulnerability allows unauthorized file access due to improper path sanitization.