Exchange — PoC Archivehttps://poc.intelseclab.com/tags/exchange/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Microsoft Exchange Authenticated Arbitrary File Read via EWS Reference Attachment (CVE-2026-45504)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45504-exchange-file-read/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45504-exchange-file-read/High severity — web · CVE-2026-45504. Status: PoC. Affects: Microsoft Exchange Server (OWA / EWS). Tags: exchange, owa, ews, file-read, ssrf, ntlm, soap, lfi.webHighexchangeowaewsfile-readssrfntlmsoaplfiExchange Health Checker Outbound Rule Blind Spot (CVE-2026-42897)https://poc.intelseclab.com/pocs/web/2026-05-15_exchange-health-checker-outbound-rule-blind-spot/Fri, 15 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-15_exchange-health-checker-outbound-rule-blind-spot/Medium severity (CVSS 5.3) — web · CVE-2026-42897. Status: Researched. Affects: Microsoft CSS-Exchange Health Checker (HealthChecker.ps1). Tags: Exchange, HealthChecker, IIS, URL-Rewrite, outbound-rules, EOMT, CSP, detection-gap.webMediumExchangeHealthCheckerIISURL-Rewriteoutbound-rulesEOMTCSPdetection-gap