7.2High

CVE-2026-118151Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server Subscription Edition RTM Published: (2 days ago)

Description

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Weakness (CWE): CWE-73

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
microsoft exchange server se 15.02.0.0 – < 15.02.2562.057
Microsoft Microsoft Exchange Server Subscription Edition RTM 15.02.0.0 – < 15.02.2562.057

References and patches