EIP-2026-118668

This exploit leverages a VBScript-based OLE Automation Array vulnerability (similar to CVE-2014-6332) to achieve remote code execution on IBM Security AppScan Standard <= 9.0.2. It serves a malicious payload via a Python HTTP server and executes it using PowerShell.