EIP-2026-118794

This exploit leverages a path traversal vulnerability in Microsoft IIS 5.1 by sending a specially crafted HTTP GET request with a malformed filename (using Unicode encoding) to disclose the source code of scripts stored on FAT/FAT32 volumes. The 'Translate: f' header forces the server to return the file as plain text.