EIP-2026-117502
PRE-CVEMicrosoft MSINFO32.EXE 6.1.7601 - '.NFO' XML External Entity Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-117502. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This exploit demonstrates an XXE (XML External Entity) vulnerability in Microsoft Windows MSINFO32.exe, allowing remote attackers to exfiltrate files from the victim's system by crafting a malicious .nfo file. The PoC includes a DTD file and a malicious .nfo file that, when opened, sends the contents of a target file to an attacker-controlled server.
Description
Microsoft MSINFO32.EXE 6.1.7601 - '.NFO' XML External Entity Injection
Exploits (1)
This exploit demonstrates an XXE (XML External Entity) vulnerability in Microsoft Windows MSINFO32.exe, allowing remote attackers to exfiltrate files from the victim's system by crafting a malicious .nfo file. The PoC includes a DTD file and a malicious .nfo file that, when opened, sends the contents of a target file to an attacker-controlled server.