EIP-2026-119672

This exploit demonstrates an unauthenticated XML External Entity (XXE) vulnerability in CyberPower Systems PowerPanel Business Edition 3.1.2. The vulnerability allows arbitrary file retrieval via out-of-band (OOB) data exfiltration by leveraging DTD parameter entities in the XML parsing logic of the `xmlservice` servlet.