EIP-2026-118789

This is a writeup describing an information disclosure vulnerability in Microsoft IIS where a crafted GET request can leak internal IP addresses or network names via a 302 Object Moved error message. The provided example is a simple HTTP request demonstrating the exploit.