EIP-2026-119295

The vulnerability in BadBlue Personal Edition versions 2.5 and prior allows the 'Pass Thru' function to be abused as a proxy, enabling attackers to obfuscate their identities and bypass network controls. The exploit involves sending a crafted HTTP request to the 'ext.dll' endpoint with the 'mfcisapicommand=PassThru' parameter.