EIP-2026-100662

This exploit leverages a deserialization vulnerability in Sitecore's XAML parser to execute arbitrary code by injecting a malicious payload via the `__PARAMETERS` field, leading to remote code execution (RCE). The payload uses ASP.NET controls to extract connection strings from the target system.