EIP-2026-119086

PRE-CVE

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119086. PoCs published by Gregory R. Panakkal.

AI-analyzed exploit summary This exploit leverages an ActiveX control vulnerability in Rediff Bol Instant Messenger to disclose the contents of a user's Windows Address Book. The provided JavaScript code instantiates the vulnerable ActiveX object and calls its FullAddressBook method to retrieve sensitive information.

Description

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

Exploits (1)

exploitdb WORKING POC VERIFIED
by Gregory R. Panakkal · textremotewindows
https://www.exploit-db.com/exploits/26221

This exploit leverages an ActiveX control vulnerability in Rediff Bol Instant Messenger to disclose the contents of a user's Windows Address Book. The provided JavaScript code instantiates the vulnerable ActiveX object and calls its FullAddressBook method to retrieve sensitive information.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Rediff Bol Instant Messenger (version not specified)
No auth needed
Prerequisites: Victim must execute the malicious script in a context where ActiveX is enabled (e.g., Internet Explorer with ActiveX permissions)
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026