Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild.
The vulnerability, tracked as CVE-2026-42897 (CVSS score: 8.1), has been described as a spoofing bug stemming from a cross-site scripting flaw. An anonymous researcher has been credited with discovering and reporting the issue.
"
source https://thehackernews.com/2026/05/on-prem-microsoft-exchange-server-cve.html
Friday, May 15, 2026
On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box