EIP-2026-118961

The exploit demonstrates multiple vulnerabilities in the Newv SmartClient ActiveX control, including arbitrary command execution via the RunCommand method and a stack-based buffer overflow in the WriteTextFile function. The provided PoC code shows how an attacker can execute arbitrary commands (e.g., calc.exe) or trigger a buffer overflow leading to potential code execution.