EIP-2026-119287

The exploit demonstrates a denial-of-service (DoS) vulnerability in WinSCP by triggering memory corruption via excessively long 'sftp:' or 'scp' addresses. The provided HTML files leverage either a meta refresh or a VBScript to launch WinSCP with a malformed URI, causing the application to crash.