EIP-2026-119265

This exploit leverages WebCatalog's improper handling of arbitrary protocols via Electron's shell.openExternal function. By crafting a malicious 'search-ms://' URL, an attacker can trigger execution of a reverse shell payload hosted on an SMB share when the victim interacts with the link.