EIP-2026-119687

This is a functional CSRF exploit for WatchGuard XTMv that allows an attacker to create an arbitrary administrator account via a crafted HTML form. The PoC includes a detailed technical analysis of the vulnerability, including HTTP request/response examples and a working exploit form.