EIP-2026-115776

This exploit demonstrates a Windows .reg file dialog box message spoofing vulnerability, allowing an attacker to manipulate the default registry warning messages to trick users into executing malicious registry entries. The PoC includes a persistent RCE backdoor via a crafted .reg file and a remote XML payload.