EIP-2026-117130

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Microsoft EMET, allowing local file exfiltration to a remote server via a crafted .config file. The PoC includes a DTD file and a malicious XML payload that reads C:\Windows\system.ini and sends its contents to an attacker-controlled server.