EIP-2026-119429

This exploit demonstrates an SQL injection authentication bypass in Soitec SmartEnergy 1.4 SCADA login. The 'login' POST parameter is manipulated with a classic SQLi payload (' or 1=1--) to bypass authentication without valid credentials.