Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-119665. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This exploit demonstrates an XML External Entity (XXE) injection vulnerability in WinRAR 5.80. By crafting a malicious HTML file with an embedded XML payload, an attacker can force WinRAR to read local files (e.g., C:\Windows\system.ini) and exfiltrate their contents via an external DTD hosted on a controlled server.
Description
Winrar 5.80 - XML External Entity Injection
Exploits (1)
This exploit demonstrates an XML External Entity (XXE) injection vulnerability in WinRAR 5.80. By crafting a malicious HTML file with an embedded XML payload, an attacker can force WinRAR to read local files (e.g., C:\Windows\system.ini) and exfiltrate their contents via an external DTD hosted on a controlled server.