EIP-2026-118766

This HTML-based PoC exploits an ActiveX control vulnerability in McKesson Horizon Rad Station to enumerate files and environment variables on the victim's machine. It uses the OpenTextFile and GetEnvironmentVariable methods to confirm file existence and retrieve environment variable values.