EIP-2026-117947

This exploit leverages an insecure security descriptor on the WebDrive Service to allow local users to replace the service binary path and execute arbitrary commands with SYSTEM privileges. The PoC provides explicit commands to stop, reconfigure, and restart the service to add a new administrator account.