EIP-2026-101841

PRE-CVE

McAfee Email Gateway (formerly IronMail) - Cross-Site Scripting

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101841. PoCs published by Nahuel Grisolia.

AI-analyzed exploit summary This is an advisory describing multiple reflected XSS vulnerabilities in McAfee Email Gateway (formerly IronMail) version 6.7.1. The vulnerabilities are due to insufficient input sanitization in the Web Access console and require user authentication to exploit.

Description

McAfee Email Gateway (formerly IronMail) - Cross-Site Scripting

Exploits (1)

exploitdb WRITEUP
by Nahuel Grisolia · textwebappshardware
https://www.exploit-db.com/exploits/12092

This is an advisory describing multiple reflected XSS vulnerabilities in McAfee Email Gateway (formerly IronMail) version 6.7.1. The vulnerabilities are due to insufficient input sanitization in the Web Access console and require user authentication to exploit.

Classification
Writeup 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: McAfee Email Gateway (formerly IronMail) ver.6.7.1
Auth required
Prerequisites: Authenticated access to the Web Access console
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026