EIP-2026-117477

This exploit demonstrates an XXE (XML External Entity) vulnerability in Microsoft Authorization Manager (azman.msc) via msxml3.dll, allowing file exfiltration by tricking a user into opening a malicious XML file. The PoC includes steps to create an evil XML file and a DTD payload to steal files like system.ini.