EIP-2026-101199

PRE-CVE

Cisco Email Security Appliance (IronPort) C160 - 'Host' Header Injection

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101199. PoCs published by Todor Donev.

AI-analyzed exploit summary This Perl script demonstrates a header injection vulnerability in Cisco IronPort C160 by sending a crafted 'Host' header in an HTTP request. It uses LWP::UserAgent to send the request and prints the response headers, confirming the injection.

Description

Cisco Email Security Appliance (IronPort) C160 - 'Host' Header Injection

Exploits (1)

exploitdb WORKING POC
by Todor Donev · perlremotehardware
https://www.exploit-db.com/exploits/47329

This Perl script demonstrates a header injection vulnerability in Cisco IronPort C160 by sending a crafted 'Host' header in an HTTP request. It uses LWP::UserAgent to send the request and prints the response headers, confirming the injection.

Classification
Working Poc 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Cisco Email Security Appliance (IronPort) C160
No auth needed
Prerequisites: Network access to the target appliance
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026