EIP-2026-118174

This exploit leverages an unquoted service path vulnerability in XAMPP 8.2.4 on Windows to achieve remote code execution by replacing the 'mysql.exe' binary with a malicious payload. The PoC includes steps to generate a Meterpreter shell and set up a listener for remote access.