EIP-2026-117478

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Microsoft Baseline Security Analyzer 2.3, allowing local file exfiltration or NTLM hash theft via a crafted .mbsa file. The PoC includes both file exfiltration and forced authentication techniques.