CVE Listesine Dön
CVE-2021-26855 CISA KEV · Aktif SömürülüyorFidye Yazılımı İlişkiliOtomatik saldırıya uygun · CISA

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS Skor

9.1

EPSS İhtimal

%100.0

Risk Skoru

18.2

Yayın

5 yıl önce

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

CVE-2021-26855: PoC (Not a HoneyPoC for once!)

Public PoCKaynak güncellemesi: 30.09.2026 19:27:07

patched to work

Public PoCKaynak güncellemesi: 30.07.2026 13:42:42

Goal is to triage well known attacks and learn how security teams quickly respond.

Public PoCKaynak güncellemesi: 29.07.2026 01:28:02

CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit (ProxyShell/ProxyLogon), another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations worldwide.

Public PoCKaynak güncellemesi: 08.08.2026 13:07:14

An advanced exploit for Microsoft Exchange Server (CVE-2021-26855, CVE-2021-27065) enhanced with Convergent Time Theory principles, achieving near-perfect theoretical rating through quantum temporal resonance and α-dispersion techniques.

Public PoCKaynak güncellemesi: 27.01.2026 12:28:25

Wercd/CVE-2021-26855

Public PoCKaynak güncellemesi: 04.12.2025 07:12:32

glen-pearson/ProxyLogon-CVE-2021-26855

Public PoCKaynak güncellemesi: 11.11.2025 00:26:02

Clone from gist

Public PoCKaynak güncellemesi: 23.06.2025 10:46:20

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.

Public PoCKaynak güncellemesi: 12.08.2024 20:11:07

ShyTangerine/cve-2021-26855

Public PoCKaynak güncellemesi: 25.04.2023 04:29:36

Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)

Exploit referansıKaynak güncellemesi: 21.05.2021 00:00:00

Microsoft Exchange 2019 - Unauthenticated Email Download

Exploit referansıKaynak güncellemesi: 18.05.2021 00:00:00

Microsoft Exchange 2019 - Server-Side Request Forgery

Exploit referansıKaynak güncellemesi: 14.03.2021 00:00:00

Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)

Exploit referansıKaynak güncellemesi: 11.03.2021 00:00:00

Nuclei: Microsoft Exchange Server SSRF Vulnerability

Exploit referansı

http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html

Exploit referansı

http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html

Exploit referansı

http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html

Exploit referansı

http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html

Exploit referansı

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2021-26855"