EIP-2026-103523

The exploit leverages SVG's ability to execute Java code when opened, using a malicious SVG file and a JAR payload to achieve remote code execution. The PoC files are hosted externally but are directly linked in the ExploitDB entry.