CVE-2026-118149 Microsoft Exchange Server Remote Code Execution Vulnerability
8.8
Analys på rafaelpfister.ch
Tillverkarens beskrivning (engelska)
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network. Referensdata
- Tillverkare
- Microsoft
- Berörda produkter
- Microsoft Exchange Server Subscription Edition RTM
- CVSS 3.1
- 8.8 (HIGH)
- Vektor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C- Typ av svaghet
- CWE-94: Code Injection
- Publicerad
- 10 november 2026
