EIP-2026-118764

This Metasploit module exploits a vulnerability in McAfee SaaS MyCioScan's ActiveX component (myCIOScn.dll) via the ShowReport() function, which fails to validate the FileName argument, allowing arbitrary command execution via ShellExecuteW(). It uses a WebDAV server to deliver a malicious VBS payload.