EIP-2026-119031

This exploit leverages an insecure method in Pegasus Imaging ThumbnailXpress ActiveX control to delete arbitrary files on the target system. The vulnerability is triggered by calling the CacheFile() method with a specified file path, which is deleted upon process termination.