EIP-2026-119664

The exploit leverages XMLDecoder in Wieland wieplan 4.1 to achieve arbitrary Java code execution by embedding a malicious XML payload that triggers Runtime.exec(). This results in remote code execution (RCE) when a victim opens a crafted .wie file.