EIP-2026-115815
PRE-CVEMicrosoft Windows PowerShell - Unsanitized Filename Command Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-115815. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This exploit leverages unsanitized filenames in PowerShell to execute arbitrary commands embedded in the filename itself. It demonstrates how a specially crafted .ps1 filename with semicolons or spaces can trigger unexpected command execution, bypassing visual inspection of the script's contents.
Description
Microsoft Windows PowerShell - Unsanitized Filename Command Execution
Exploits (1)
This exploit leverages unsanitized filenames in PowerShell to execute arbitrary commands embedded in the filename itself. It demonstrates how a specially crafted .ps1 filename with semicolons or spaces can trigger unexpected command execution, bypassing visual inspection of the script's contents.