EIP-2026-118734

This exploit leverages a format string vulnerability in Magic Winmail Server 2.3 (Build 0402) via the SMTP protocol to achieve remote code execution. It uses crafted format specifiers to overwrite memory addresses and execute arbitrary commands via a custom shellcode.