EIP-2026-117178

This exploit demonstrates a local privilege escalation via an unquoted service path in Foxit Cloud Update Service. The service runs with SYSTEM privileges, allowing a local attacker to execute arbitrary code by inserting a malicious executable in the service path.