EIP-2026-119414

The exploit demonstrates a directory traversal vulnerability in Schneider Electric Pelco VideoXpert Core Admin Portal, allowing unauthenticated attackers to read arbitrary files on the server. The PoC includes HTTP requests that successfully retrieve sensitive files like `win.ini` and `key.pem`.