CVE-2026-21510
HIGH KEVMicrosoft Windows Shell - Protection Mechanism Failure
Title source: llmExploitation Summary
CVE-2026-21510 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added February 10, 2026. EIP tracks 6 public exploits from researchers including XiaomingX, adminlove520, ChaitanyaHaritash.
AI-analyzed exploit summary This repository contains a functional SQL injection exploit for WordPress Quiz Maker (CVE-2025-10042), demonstrating time-based blind SQLi via crafted HTTP headers. The PoC includes data extraction logic for WordPress admin credentials and hashes.
Description
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
Exploits (6)
This repository contains a functional SQL injection exploit for WordPress Quiz Maker (CVE-2025-10042), demonstrating time-based blind SQLi via crafted HTTP headers. The PoC includes data extraction logic for WordPress admin credentials and hashes.
This repository contains a functional exploit PoC for CVE-2026-21510, a Windows ShellLink Remote Code Execution vulnerability. The code generates malicious .LNK files with obfuscation, encryption, and anti-forensic techniques to exploit the vulnerability.
This repository contains functional exploit code for CVE-2026-21510 and CVE-2026-21514, focusing on RTF and LNK file generation to bypass Protected View and achieve RCE. The scripts demonstrate technical details of the exploit chain, including obfuscation and payload delivery mechanisms.
This repository contains a detailed writeup for CVE-2026-21510, a Windows Shell security feature bypass vulnerability. It describes the vulnerability, impact, affected systems, and mitigation steps but does not include exploit code.
This repository provides a detailed technical analysis of CVE-2026-21510, a Windows Shell security feature bypass vulnerability. It includes impact assessment, affected systems, mitigation steps, and references, but lacks actual exploit code.
This repository contains a functional Python tool for generating malicious .LNK files exploiting CVE-2026-21510, a Windows ShellLink Remote Code Execution vulnerability. It includes advanced obfuscation, payload embedding, and anti-forensic techniques.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H