Exploit for Microsoft-Exchange-RCE

CVE-2021-26855 CVE-2021-27065

kitploit · 2026-08-26

Description

RCE in Microsoft Exchange via CVE-2021-26855 and CVE-2021-27065 remote code execution.

Affected Microsoft Exchange Server versions

Microsoft Exchange Server= 2013, 2016, 2019

All known vulnerabilities by product

Exchange Server

CVSS Score

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:NONE

Exploit Details

Modified:2026-08-26 06:30

Last Seen:2026-08-26 07:19

Reporter:KitPloit

Tags

Microsoft Exchangeremote code executionCVE-2021-26855CVE-2021-27065exploitation tools

Other exploits for the same CVE

CVE-2021-26855-Scanner

2026-08-27 KitPloitKITPLOIT

CVE-2021-26855_SSRF

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

testanull-CVE-2021-26855_read_poc.txt

2026-08-27 KitPloitKITPLOIT

CVE-2021-26855-SSRF

2026-08-27 KitPloitKITPLOIT

CVE-2021-26855-d

2026-08-27 KitPloitKITPLOIT

CVE-2021-26855-SSRF-Exchange

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SSRSEC-MICROSOFT-EXCHANGE-RCE
# Microsoft-Exchange-RCE

Microsoft Exchange CVE-2021-26855&CVE-2021-27065 ![](https://raw.githubusercontent.com/heikanet/Microsoft-Exchange-RCE/main/pic.png)