Isn't this a click-baitish title? I would say that this is a configuration issue and not "exactly" a vulnerability and basically get off my lawn.
Reading blueimp's and larry's comments here I envy their constructivity, open mindedness and professionalism.