EIP-2026-117517

This exploit targets weak service permissions in Windows XP/2000 to escalate privileges by modifying vulnerable services (e.g., DcomLaunch, UpnpHost) to execute arbitrary code. It includes a backdoor payload encoded as a VBScript that drops and executes a malicious binary.