CVE-2026-118149 Microsoft Exchange Server Remote Code Execution Vulnerability

Produsentens beskrivelse (engelsk)

Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

Referansedata

Produsent

Microsoft

Berørte produkter

• Microsoft Exchange Server Subscription Edition RTM

CVSS 3.1

8.8 (HIGH)

Vektor

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Type svakhet

CWE-94: Code Injection

Publisert

10. november 2026

Offisielle kilder

• CVE.org
• NVD
• Produsentens advisory

← Alle sårbarheter