EIP-2026-119427

The exploit demonstrates an authentication bypass vulnerability in SoftPerfect Bandwidth Manager by sending a crafted HTTP request with a malformed 'Authorization: Basic' header. This bypass allows an attacker to retrieve the cleartext password from the application's database without valid credentials.