7.1Yüksek
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
8.8Yüksek
CVE-2026-118207Microsoft Exchange Server Remote Code Execution Vulnerability
Açıklama
Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
Zayıflık türü (CWE):
CWE-706
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| microsoft | exchange server se | 15.02.0.0 – < 15.02.2562.057 | |
| Microsoft | Microsoft Exchange Server Subscription Edition RTM | 15.02.0.0 – < 15.02.2562.057 |
Kaynaklar ve yamalar
- Microsoft Exchange Server Remote Code Execution Vulnerability vendor-advisorypatch