EIP-2026-115505

This writeup details a path traversal vulnerability in Kaspersky's HTTPS inspection feature, where crafted certificate Common Names (CN) can write arbitrary files to the filesystem. The author demonstrates generating a malicious certificate and using it to create a file in a sensitive location, potentially leading to code execution.