EIP-2026-117507

The exploit demonstrates an XML External Entity (XXE) vulnerability in PowerShell's XML parser, allowing local file access and exfiltration to an attacker-controlled server. It includes functional PoC code for two attack scenarios: reading XML from a web server and from a remote share in a LAN.