EIP-2026-118289

PRE-CVE

Autodesk IDrop - ActiveX Remote Code Execution

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118289. PoCs published by Elazar.

AI-analyzed exploit summary This is a functional exploit for a remote code execution vulnerability in Autodesk IDrop. It uses a heap spray technique to trigger shellcode execution via a crafted HTML page targeting the ActiveX control (CLSID: 21E0CB95-1198-4945-A3D2-4BF804295F78).

Description

Autodesk IDrop - ActiveX Remote Code Execution

Exploits (1)

exploitdb WORKING POC VERIFIED

by Elazar · htmlremotewindows

https://www.exploit-db.com/exploits/8560

View Code ZIP pw:eip

This is a functional exploit for a remote code execution vulnerability in Autodesk IDrop. It uses a heap spray technique to trigger shellcode execution via a crafted HTML page targeting the ActiveX control (CLSID: 21E0CB95-1198-4945-A3D2-4BF804295F78).

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Autodesk IDrop (ActiveX control)

No auth needed

Prerequisites: Victim must visit the malicious HTML page · Autodesk IDrop ActiveX control must be installed and enabled

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026