EIP-2026-117489
PRE-CVEMicrosoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted Service Path
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117489. PoCs published by Antonio Cuomo.
AI-analyzed exploit summary This is a technical writeup demonstrating an unquoted service path vulnerability in Microsoft Exchange Server 2013 SP1. The exploit leverages the lack of quotes around the executable path in the 'MSExchangeMailboxAssistants' service, potentially allowing local privilege escalation if an attacker can place a malicious executable in a higher-priority path.
Description
Microsoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted Service Path
Exploits (1)
This is a technical writeup demonstrating an unquoted service path vulnerability in Microsoft Exchange Server 2013 SP1. The exploit leverages the lack of quotes around the executable path in the 'MSExchangeMailboxAssistants' service, potentially allowing local privilege escalation if an attacker can place a malicious executable in a higher-priority path.