EIP-2026-118134

This exploit leverages a vulnerability in WinRAR's 'Import Settings From File' function to overwrite registry keys, specifically using AppInit DLLs to achieve remote code execution. It generates a malicious .reg file that, when imported, loads a DLL from a remote SMB share.