EIP-2026-118858

This exploit leverages a vulnerability in Outlook Web Access (OWA) where HTML email attachments are not filtered if the 'did' parameter is omitted, allowing script execution. The script uses an ActiveXObject to perform a TRACE request, extracting and decoding Base64-encoded credentials from the response.