EIP-2026-114931

This exploit demonstrates a backdoor in Armadito Antivirus where files containing 'ARMADITO.TXT' in their name are whitelisted and bypass scanning. The PoC converts device names to MS-DOS names and checks for the whitelist condition.