EIP-2026-117926

This exploit leverages an unquoted service path vulnerability in SolarWinds Kiwi Syslog Server 8.3.52, allowing an attacker to escalate privileges by placing a malicious executable in the root of the C: drive, which gets executed as Local System when the service restarts.