EIP-2026-119655
PRE-CVEWindows PowerShell - Event Log Bypass Single Quote Code Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-119655. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This advisory details a PowerShell single quote bypass and event log truncation vulnerability, allowing arbitrary code execution and evasion of logging mechanisms. The technique leverages semicolons and ampersands in filenames to execute unintended commands while masking the true filename in PowerShell event logs.
Description
Windows PowerShell - Event Log Bypass Single Quote Code Execution
Exploits (1)
This advisory details a PowerShell single quote bypass and event log truncation vulnerability, allowing arbitrary code execution and evasion of logging mechanisms. The technique leverages semicolons and ampersands in filenames to execute unintended commands while masking the true filename in PowerShell event logs.