EIP-2026-118501

This exploit targets an insecure method in Edraw Office Viewer Component v5.4, specifically the HttpDownloadFile() function, which allows arbitrary file download to the victim's system. The PoC uses VBScript to trigger the download of a file from a remote server to a local path.