Microsoft warns of Exchange zero-day flaw exploited in attacks
12 Articles
12 Articles
A critical vulnerability currently threatens numerous local Exchange servers. Attackers can execute malicious code via prepared emails. A final patch is missing, which puts IT managers before difficult decisions. (Read more)
Microsoft has confirmed the active exploitation of the CVE-2026-42897 vulnerability in the Exchange Server, placing administrators and security teams on alert. Failure, classified as zero-day, is already being used in real attacks even before the availability of a definitive patch. The problem affects local environments of the Exchange Server and allows attacks involving Outlook Web Access (OWA) through a Cross-Site Scripting (XSS) vulnerability…
securityweek.com
cybernoz.comMicrosoft Warns of Exchange Server Zero-Day Exploited in the Wild
Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions. The post Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild appeared first on SecurityWeek.
A vulnerability has been discovered in Microsoft Exchange Server. It allows an attacker to cause a remote indirect code injection (XSS) and a circumvention of security policy. Microsoft indicates that the vulnerability CVE-2026-42897 is actively exploited. See online: https://www.cert.ssi.gouv.fr/avis/C...
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
