EIP-2026-119176

This exploit leverages an insecure method (PackageFiles) in the SupportSoft DNA Editor ActiveX control (dnaedit.dll v6.9.2205) to achieve remote code execution via script injection and directory traversal. The PoC injects VBScript into a system file (msinfo.htm) and triggers execution via the Help and Support Center Service.