EIP-2026-115258

This exploit leverages a remote code execution vulnerability in FlashGet 3.x via an ActiveX control (CLSID: {C6262DCE-6E64-45D2-B080-801F1E298AC2}) to execute arbitrary code on the target system. The PoC is a simple HTML object tag that triggers the vulnerability when rendered in Internet Explorer.