Exploit for Microsoft_Exchange_Server_SSRF_CVE-2021-26855

kitploit · 2026-08-25

Description

SSRF vulnerability in Microsoft Exchange Server (CVE-2021-26855) with ~30% probing success.

Affected Microsoft Exchange Server versions

Microsoft Exchange Server= 2013, 2016, 2019

All known vulnerabilities by product

Exchange Server

CVSS 9.8 for CVE-2021-26855

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:NONE

CVE Information

References

https://github.com/conjojo/Microsoft_Exchange_Server_SSRF_CVE-2021-26855/blob/master/Microsoft_Exchange_Server_SSRF_CVE-2021-26855.py

Exploit Details

Modified:2026-08-25 17:55

Last Seen:2026-08-26 03:16

Reporter:KitPloit

Tags

Microsoft Exchange ServerServer-Side Request ForgeryCVE-2021-26855Seebug toolkitPocsuite3Probing script

Other exploits for CVE-2021-26855

CVE-2021-26855-Scanner

2026-08-27 KitPloitKITPLOIT

CVE-2021-26855_SSRF

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

testanull-CVE-2021-26855_read_poc.txt

2026-08-27 KitPloitKITPLOIT

Microsoft-Exchange-RCE

2026-08-27 KitPloitKITPLOIT

CVE-2021-26855-SSRF

2026-08-27 KitPloitKITPLOIT

CVE-2021-26855-d

2026-08-27 KitPloitKITPLOIT

CVE-2021-26855-SSRF-Exchange

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-CONJOJO-MICROSOFT_EXCHANGE_SERVER_SSRF_CVE-2021-26855
# Microsoft_Exchange_Server_SSRF_CVE-2021-26855

**zoomeye dork: app:"Microsoft Exchange Server"**

![](https://assets.kitploit.com/production/public/readmes/23997/a4f384182d8fa7dbe3014653a5dec8ad6ec03923dc5c5f1fde3a5f7663a06a8f.png)

Скрипт Microsoft_Exchange_Server_SSRF_CVE-2021-26855.py, написанный с использованием набора инструментов Seebug и pocsuite3, использовался для проверки данных за последний год: ![](https://assets.kitploit.com/production/public/readmes/23997/0194388fc755fc3cf8759615f2f535988bce834934fc32fee63a53d09675d453.png)

**Доля успешных проверок: примерно 1500 / 5000 = 30%**