EIP-2026-116959

This exploit demonstrates an XXE vulnerability in Cimetrics BACnet Explorer 4.0, allowing arbitrary file disclosure via out-of-band (OOB) data exfiltration. The PoC uses a malicious XML file with external entity references to retrieve sensitive data (e.g., `win.ini`) and send it to an attacker-controlled server.