EIP-2026-118395

This exploit leverages an insecure method in the CygniCon CyViewer ActiveX control to create or overwrite files, potentially leading to arbitrary code execution with user-level privileges. The PoC uses VBScript to call the vulnerable SaveData method.