References https://learn.microsoft.com/zh-cn/security-updates/securitybulletins/2010/ms10-065 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=10009 https://learn.microsoft.com/zh-cn/security-updates/securitybulletins/2014/ms14-076 https://www.secrss.com/articles/8523 https://www.cnblogs.com/1008612mrzou/p/15393711.html https://juejin.cn/post/7380283122489442304 https://www.hkcert.org/tc/security-bulletin/microsoft-internet-information-services-iis-denial-of-service-vulnerability https://nvd.nist.gov/vuln/detail/CVE-2019-0941 https://www.trendmicro.com/en_us/research/17/c/iis-6-0-vulnerability-leads-code-execution.html https://www.sentinelone.com/vulnerability-database/cve-2023-36434/ https://nvd.nist.gov/vuln/detail/CVE-2020-0645 https://app.opencve.io/cve/?product=internet_information_services&vendor=microsoft https://support.microsoft.com/en-us/topic/ms10-065-vulnerabilities-in-microsoft-internet-information-services-iis-could-allow-remote-code-execution-e8f66a02-c259-37d2-5853-a0f4edae0609 https://www.cybersecurity-help.cz/vdb/soft/microsoft/microsoft_iis/10.0/
Related VulnerabilitiesPoCCVE-2026-11801: WPAdverts <= 2.3.2 - Information DisclosurePoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File UploadPoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information DisclosurePoCCVE-2026-27796: Homarr < 1.54.0 - Information DisclosurePoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCEMicrosoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞(CVE-2025-53770)Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞(CVE-2026-50522)Microsoft SharePoint Server JWT 权限绕过漏洞(CVE-2026-55040)PoCCVE-2026-1980: WPBookit <= 1.0.8 - Unauthenticated Customer Information DisclosurePoCCVE-2026-8386: WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure金蝶EAS /ormrpc/services/BSHService 代码执行漏洞PoCCVE-2026-22778: vLLM 0.8.3 - 0.14.0 - Information DisclosurePoCCVE-2026-8383: LearnPress < 4.3.7 - Information Disclosure