EIP-2026-117393

This exploit leverages insecure file permissions in LabF nfsAxe 3.7's default installation directory under C:\Users\Public\ to replace the xsetsrv.exe service binary with a malicious executable, achieving Local System privilege escalation upon service restart.