EIP-2026-119133

This exploit leverages an unsafe ActiveX control in Siemens Solid Edge ST4/ST5 to execute arbitrary commands via the OpenInEditor() method, which calls ShellExecuteExW() with attacker-controlled input. The PoC demonstrates RCE by launching calc.exe or a remote .jar file to bypass confirmation prompts.