CVE-2017-7269

ENISA EUVD: EUVD-2017-16299 ↗
Exploited in the Wild ✓ Confirmed 0-Day
Triaged: March 20, 2026 3 articles
VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
94.41%
probability
This CVE has a 94.41% probability of being exploited in the next 30 days.
0% Top 100.0th percentile of all CVEs 100%

CVSS v3.1

Source: NVD
9.8
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Attack Intelligence

Exploits & PoC

zcgonvh/cve-2017-7269

fixed msf module for cve-2017-7269

135
lcatro/CVE-2017-7269-Echo-PoC

CVE-2017-7269 回显PoC ,用于远程漏洞检测..

89
eliuha/webdav_exploit

An exploit for Microsoft IIS 6.0 CVE-2017-7269

22
Al1ex/CVE-2017-7269

PoC CVE-2017-7269 — Al1ex/CVE-2017-7269

11
h3x0v3rl0rd/CVE-2017-7269

PoC CVE-2017-7269 — h3x0v3rl0rd/CVE-2017-7269

5
slimpagey/IIS_6.0_WebDAV_Ruby

Ruby Exploit for IIS 6.0 Buffer Overflow (CVE-2017-7269)

5
geniuszly/CVE-2017-7269

is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6

4
caicai1355/CVE-2017-7269-exploit

exec 8 bytes command

1
8 repos — triés par ⭐ Rechercher sur GitHub ↗

Signal Intelligence

Confidenceⓘ
75%
EPSS 94.41%
CVSS v3.1 9.8
Mentions 3
Last Seen Jun 13, 2017

CNA Information

Analyst Note

CVE-2017-7269 is an IIS 6.0 vulnerability with explicit zero-day exploitation documented since July 2016 (before the 2017 CVE year suggests patching). Article [2] directly names it as 'Zero-Day Exploited in Live Attacks,' establishing active in-the-wild exploitation. The June 2017 Microsoft patch batch (Article [1]) aligns with vendor remediation timing.

Threat Actors 1

Turla Group
apt_group Information theft and espionage Russian Federation

Triage Info

Decided atMar 20, 2026