EIP-2026-118885
PRE-CVEMicrosoft Windows PowerShell ISE - Remote Code Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118885. PoCs published by hyp3rlinx.
AI-analyzed exploit summary The exploit demonstrates a filename parsing flaw in Windows PowerShell ISE where specially crafted filenames with array brackets can hijack script execution, leading to remote code execution. The PoC creates two PowerShell scripts, one benign and one malicious, to exploit this behavior.
Description
Microsoft Windows PowerShell ISE - Remote Code Execution
Exploits (1)
The exploit demonstrates a filename parsing flaw in Windows PowerShell ISE where specially crafted filenames with array brackets can hijack script execution, leading to remote code execution. The PoC creates two PowerShell scripts, one benign and one malicious, to exploit this behavior.