EIP-2026-119403
PRE-CVEMicrosoft Exchange - IIS HTTP Internal IP Address Disclosure (Metasploit)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-119403. PoCs published by Nate Power.
AI-analyzed exploit summary This Metasploit auxiliary module scans Microsoft Exchange servers for internal IP address disclosure via HTTP headers in responses from specific paths. It checks for 401 Unauthorized responses with WWW-Authenticate headers or 3xx redirects containing internal IP addresses.
Description
Microsoft Exchange - IIS HTTP Internal IP Address Disclosure (Metasploit)
Exploits (1)
This Metasploit auxiliary module scans Microsoft Exchange servers for internal IP address disclosure via HTTP headers in responses from specific paths. It checks for 401 Unauthorized responses with WWW-Authenticate headers or 3xx redirects containing internal IP addresses.