EIP-2026-117500
PRE-CVEMicrosoft Internet Explorer 11 - XML External Entity Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117500. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This is a functional proof-of-concept exploit for an XML External Entity (XXE) injection vulnerability in Microsoft Internet Explorer 11. It generates malicious .MHT and XML files that, when opened locally, exfiltrate sensitive files (e.g., system.ini) to an attacker-controlled server.
Description
Microsoft Internet Explorer 11 - XML External Entity Injection
Exploits (1)
This is a functional proof-of-concept exploit for an XML External Entity (XXE) injection vulnerability in Microsoft Internet Explorer 11. It generates malicious .MHT and XML files that, when opened locally, exfiltrate sensitive files (e.g., system.ini) to an attacker-controlled server.