On SOYAL AR-727H and AR-829Ev5 devices, all CGI programs allow unauthenticated POST access.
soyal ar-727h_firmware -
soyal ar-829ev5_firmware -