EIP-2026-103683

This exploit leverages a heap-overflow vulnerability in Transmit 3 by crafting a malicious FTPS URL with an overly long string (408 'A's followed by 'ABCD'). The overflow occurs when the application processes the URL, potentially allowing arbitrary code execution with administrative privileges.