EIP-2026-118777

This exploit targets a vulnerability in MetaProducts MetaTreeX V 1.5.100, specifically the SaveToBMP() method, which allows remote file overwrite. The PoC uses an ActiveX control to overwrite a system file (c:\windows\system_.ini) when a button is clicked.