EIP-2026-119667

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Microsoft Windows mshta.exe, allowing local data theft and reconnaissance by crafting a malicious HTA file. The PoC includes a multi-program recon technique and checks for virtual machine environments.