EIP-2026-118987

This exploit leverages an implementation flaw in OpenText FirstClass Client to create a malicious HTA file via a crafted URI, which executes upon system reboot. The attack abuses the client's settings file mechanism to inject and execute arbitrary code.