EIP-2026-117486

The exploit demonstrates an XXE (XML External Entity) vulnerability in Microsoft Excel Starter 2010, allowing remote file disclosure by crafting a malicious .xls file that exfiltrates system files to an attacker-controlled server.