EIP-2026-117352

PRE-CVE

Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-117352. PoCs published by sinn3r.

AI-analyzed exploit summary This exploit is a Python script that decrypts passwords stored in the Ipswitch IMail Server registry by reversing the encryption algorithm in IMailsec.dll. It requires a username and encrypted password as input to produce the plaintext password.

Description

Ipswitch IMAIL 11.01 - Reversible Encryption + weak ACL

Exploits (1)

exploitdb WORKING POC VERIFIED
by sinn3r · textlocalwindows
https://www.exploit-db.com/exploits/11331

This exploit is a Python script that decrypts passwords stored in the Ipswitch IMail Server registry by reversing the encryption algorithm in IMailsec.dll. It requires a username and encrypted password as input to produce the plaintext password.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Ipswitch IMail Server 11.01
No auth needed
Prerequisites: Access to the registry key containing encrypted passwords · Knowledge of the username associated with the encrypted password
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026