EIP-2026-119340

This is a technical writeup detailing an unauthenticated directory traversal vulnerability in 3Com iMC (Intelligent Management Center) versions 3.3.9 and 3.3 SP1 R2 606. The vulnerability allows arbitrary file retrieval from the server's filesystem via crafted HTTP requests to the `/imc/report/DownloadReportSource` endpoint.