EIP-2026-117418

This exploit leverages an insecure ActiveX method in LiquidXML Studio 2012 to create an executable file in the Windows Startup folder, achieving remote code execution (RCE) via a crafted HTML file. The exploit uses the `OpenFile` and `AppendString` methods to write a malicious HTA file that executes arbitrary commands.