[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"all-banners":3,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":44,"vulnerability-29798":51,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":81,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":87},[4,15,21,27,33,39],{"title":5,"slug":6,"text":7,"link":8,"external":9,"targets":10,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Network Scanner","compliance-pages-launch-network-scanner","Scheduled scans are the spine of every compliance framework. Are you audit-ready?","https:\u002F\u002Fpentest-tools.com\u002Fusage\u002Fcompliance",false,[11],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Get compliance evidence","secondary","compliance-pages-launch",{"title":16,"slug":17,"text":18,"link":8,"external":9,"targets":19,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Website Scanner","compliance-pages-launch-website-scanner","Authenticated web-app scans show up in SOC 2, NIS2, and CRA Annex I. See why this is crucial for the business.",[20],"\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner",{"title":22,"slug":23,"text":24,"link":8,"external":9,"targets":25,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Advanced Pentest Reporting","compliance-pages-launch-reporting","Editable DOCX. Immutable PDF. JSON for the GRC tool. See why these formats are on every auditor's checklist.",[26],"\u002Ffeatures\u002Fpentest-reporting",{"title":28,"slug":29,"text":30,"link":8,"external":9,"targets":31,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Integrations","compliance-pages-launch-integrations","Vanta, Jira, webhooks - they all route back to DORA, NIS2, SOC 2, ISO 27001, CRA. See why this is crucial for the business.",[32],"\u002Ffeatures\u002Fintegrations",{"title":34,"slug":35,"text":36,"link":8,"external":9,"targets":37,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Sniper","compliance-pages-launch-sniper","Five compliance framework pages now reference Sniper as the source of validated exploitability evidence. See them all.",[38],"\u002Fexploit-helpers\u002Fsniper",{"title":40,"slug":14,"text":41,"link":8,"external":9,"targets":42,"cta":12,"variant":13,"campaign_id":14},"Compliance - Page Launch - Homepage","Turn confirmed vulnerabilities into evidence your auditor accepts. Testing requirements for DORA, NIS2, SOC 2, ISO 27001, and CRA.",[43],"\u002F",["Island",45],{"key":46,"params":47,"result":49},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":48},"{}",{"head":50},{},{"id":52,"detectable_with":53,"vuln_details":60,"vuln_id":78,"name":79,"published":80,"updated":61},29798,{"tool":54,"engine":57},{"id":55,"name":56},1,"Network Scanner",{"id":58,"name":59},2,"Nuclei",{"id":52,"codename":61,"description":61,"severity":62,"risk_description":63,"public_description":64,"public_recommendation":65,"recommendation":61,"references":66,"cvssv3":70,"epss_score":71,"epss_percentile":72,"cve":73,"in_cisa_catalog":9,"date":75,"software_type":61,"vendor":76,"product":77,"ptt_exploit_capabilities":61},null,"high","The risk exists that a remote attacker can relay the Exchange machine account to bypass authentication, access all mailboxes, and, when chained with a path-validation weakness, write an ASPX webshell to achieve SYSTEM-level remote code execution.","Microsoft Exchange Server on-premises (2016 CU23, 2019 CU14\u002FCU15, and Subscription Edition RTM) contains an authentication-bypass-by-capture-replay vulnerability in the HTTP.sys-hosted MRSProxy endpoint, which accepts Negotiate authentication without enforcing Extended Protection for Authentication channel bindings. An attacker can relay the Exchange machine account via NTLM to bypass authentication and elevate privileges, and when chained with a path-validation weakness, write an ASPX webshell to disk for pre-auth remote code execution as SYSTEM. Detection is version-based, comparing the OWA build number exposed in the \u002Fowa\u002Fauth\u002F\u003Cbuild>\u002F static resource path against Microsoft's August 2026 patched builds.","Install the August 2026 security update for your Exchange build (2016 CU23 >= 15.1.2507.72, 2019 CU14 >= 15.2.1544.44, 2019 CU15 >= 15.2.1748.49, SE RTM >= 15.2.2562.46) and enable Extended Protection for Authentication.",[67,68,69],"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2026-62911","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-62911","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fexchange\u002Fnew-features\u002Fbuild-numbers-and-release-dates",8,0.00694,0.51358,[74],"CVE-2026-62911","2026-08-11T00:00:00Z","microsoft","exchange_server","NETSCAN-NUCLEI-CVE-CVE-2026-62911","Microsoft Exchange Server - Authentication Bypass","2026-10-07T00:00:00Z",["Island",82],{"key":83,"params":84,"result":85},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":48},{"head":86},{},["Island",88],{"key":89,"params":90,"result":92},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":91},"{\"text-color\":\"gray\"}",{"head":93},{}]