EIP-2026-100645

This exploit demonstrates an Out-of-Band XML External Entity (XXE) Injection vulnerability in BlogEngine.NET, allowing an attacker to read arbitrary files from the target system by leveraging a malicious DTD hosted on an attacker-controlled server.