Immunity, Inc.
Name exchange_proxylogon_rce
CVE CVE-2021-26855
Exploit Pack CANVAS
Descriptionexchange_proxylogon_rce
NotesCVE Name: CVE-2021-26855
VENDOR: Microsoft
NOTES: The exploit should work on Microsoft Exchange Server 2016 <= CU20
and Microsoft Exchange Server 2019 <= CU8

This exploit has been tested on Microsoft Exchange Server 2016 CU12

Repeatability: Infinite
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855
CVE Url: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26855
Date public: 3/2/2021
CVSS: 9.1

Learn more about the CANVAS Exploit Pack here: CANVAS