EIP-2026-119671

This exploit demonstrates an XML External Entity (XXE) injection vulnerability in Citrix StoreFront Server. The PoC sends a maliciously crafted XML payload to the authentication endpoint, which can lead to information disclosure or server-side request forgery (SSRF).