cve.2021-26858 | Detection.FYI

CVE-2021-26858 Exchange Exploitation

Aug 12, 2024 · attack.t1203 attack.execution cve.2021-26858 detection.emerging-threats ·
Share on:

Detects possible successful exploitation for vulnerability described in CVE-2021-26858 by looking for creation of non-standard files on disk by Exchange Server’s Unified Messaging service which could indicate dropping web shells or other malicious content

Read More
ProxyLogon Reset Virtual Directories Based On IIS Log

Aug 12, 2024 · cve.2021-26858 detection.emerging-threats attack.initial-access attack.t1190 ·
Share on:

When exploiting this vulnerability with CVE-2021-26858, an SSRF attack is used to manipulate virtual directories

Read More