EIP-2026-118823

PRE-CVE

Microsoft Internet Explorer 6 - Code Execution (1)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118823. PoCs published by Michal Bucko.

AI-analyzed exploit summary This exploit leverages a vulnerability in Microsoft Internet Explorer 6 via the RDS.Dataspace ActiveX control to execute arbitrary code. The JavaScript payload decodes and executes a series of obfuscated commands, leading to remote code execution.

Description

Microsoft Internet Explorer 6 - Code Execution (1)

Exploits (1)

exploitdb WORKING POC VERIFIED

by Michal Bucko · htmlremotewindows

https://www.exploit-db.com/exploits/28876

View Code ZIP pw:eip

This exploit leverages a vulnerability in Microsoft Internet Explorer 6 via the RDS.Dataspace ActiveX control to execute arbitrary code. The JavaScript payload decodes and executes a series of obfuscated commands, leading to remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Internet Explorer 6

No auth needed

Prerequisites: Victim must visit a malicious webpage · ActiveX controls must be enabled

MITRE ATT&CK

T1189 - Drive-by Compromise T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026