SearchLeak CVE-2026-42824 SSRF Exfiltration via Bing searchbyimage imgurl

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•5

Detects outbound proxy requests to the Bing Search-by-Image endpoint where the imgurl parameter is used to perform a server-side request forgery (SSRF). Attackers use this to bypass security controls by forcing Microsoft services to fetch an external, malicious URL containing exfiltrated data within the path, as seen in the SearchLeak (CVE-2026-42824) exploit chain.