Over 29,000 Exchange Servers Unpatched Against High-Severity Flaw

Over 29,000 Exchange servers unpatched against high-severity flaw

Over 29,000 Exchange servers exposed online remain unpatched against a high-severity vulnerability that can let attackers move laterally in Microsoft cloud environments, potentially leading to complete domain compromise.

A new Exchange “Privilege Escalation” flaw exposes hybrid servers

Microsoft has released a patch for CVE-2025-53786, an Elevation of Privilege vulnerability that affects Microsoft Exchange Server 2016 and 2019. Read more...

Microsoft Updates Advisory About 'Critical' Exchange Hybrid Security Flaw

Microsoft has issued a warning about CVE-2025-53786, a serious privilege escalation vulnerability affecting hybrid setups of Microsoft Exchange Server. The company hints that the vulnerability could allow attackers with on-premises admin rights to take control of connected Exchange Online environments. The issue is relevant for Microsoft Exchange Server 2016 and 2019 when set up in […]

Nearly 30,000 Microsoft Exchange servers remain unpatched against critical hybrid flaw - SiliconANGLE

A critical vulnerability in Microsoft Exchange Server remains unpatched on nearly 30,000 systems worldwide, raising concerns about potential exploitation in hybrid cloud environments. The vulnerability, tracked as CVE-2025-53786, affects Exchange 2016, Exchange 2019 and Exchange Server Subscription Edition in hybrid configurations with Exchange Online. The vulnerability allows attackers with administrator access to an on-premises server […] The …

Over 29,000 Exchange Servers Unpatched Against High-severity Flaw - Cybernoz - Cybersecurity News

Over 29,000 Exchange servers exposed online remain unpatched against a high-severity vulnerability that can let attackers move laterally in Microsoft cloud environments, potentially leading to complete domain compromise. The security flaw (tracked as CVE-2025-53786) helps threat actors who gain administrative access to on-premises Exchange servers to escalate privileges within the organization’s connected cloud environment by forging or manipula…