EIP-2026-117491

The exploit demonstrates an XML External Entity (XXE) vulnerability in Microsoft's GDFMaker v6.3.9600.16384, allowing local file exfiltration via a crafted .GDFMakerProject file. The PoC includes a malicious XML file and DTD to extract the contents of 'msdfmap.ini' and send it to an attacker-controlled server.