EIP-2026-117741

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in oXygen XML Editor 21.1.1, allowing an attacker to read arbitrary files from the local system by leveraging a malicious DTD file hosted on a local server.