Back to the CVE list
CVE-2021-26855 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS score

9.1

EPSS probability

%100.0

Risk score

18.2

Published

5 y ago

OverviewPublic Exploits (19)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

E
Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)
Exploit-DB

Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)

Exploit referenceSource updated: 21.05.2021 00:00:00
E
Microsoft Exchange 2019 - Unauthenticated Email Download
Exploit-DB

Microsoft Exchange 2019 - Unauthenticated Email Download

Exploit referenceSource updated: 18.05.2021 00:00:00
E
Microsoft Exchange 2019 - Server-Side Request Forgery
Exploit-DB

Microsoft Exchange 2019 - Server-Side Request Forgery

Exploit referenceSource updated: 14.03.2021 00:00:00
E
Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)
Exploit-DB

Microsoft Exchange 2019 - Server-Side Request Forgery (Proxylogon) (PoC)

Exploit referenceSource updated: 11.03.2021 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26855.yaml
Nuclei

Nuclei: Microsoft Exchange Server SSRF Vulnerability

Exploit reference
N
http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html
NVD reference

http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html

Exploit reference
N
http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html
NVD reference

http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html

Exploit reference
N
http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html
NVD reference

http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html

Exploit reference
N
http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html
NVD reference

http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html

Exploit reference
G
glen-pearson/ProxyLogon-CVE-2021-26855
GitHub

glen-pearson/ProxyLogon-CVE-2021-26855

Public PoC
G
probablysecure/Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-
GitHub

Goal is to triage well known attacks and learn how security teams quickly respond.

Public PoC
G
r0xDB/CVE-2021-26855
GitHub

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server.

Public PoC
G
ShyTangerine/cve-2021-26855
GitHub

ShyTangerine/cve-2021-26855

Public PoC
G
SimoesCTT/CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065
GitHub

CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit (ProxyShell/ProxyLogon), another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations worldwide.

Public PoC
G
SimoesCTT/CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Microsoft-Exchange-Exploit
GitHub

An advanced exploit for Microsoft Exchange Server (CVE-2021-26855, CVE-2021-27065) enhanced with Convergent Time Theory principles, achieving near-perfect theoretical rating through quantum temporal resonance and α-dispersion techniques.

Public PoC
G
timb-machine-mirrors/testanull-CVE-2021-26855_read_poc.txt
GitHub

Clone from gist

Public PoC
G
Wercd/CVE-2021-26855
GitHub

Wercd/CVE-2021-26855

Public PoC
G
ZephrFish/Exch-CVE-2021-26855
GitHub

CVE-2021-26855: PoC (Not a HoneyPoC for once!)

Public PoC
G
ZephrFish/Exch-CVE-2021-26855_Priv
GitHub

patched to work

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-26855"