NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-26412

CVSS 3.1: 9.1 critical
EPSS: 33%p98
Published: Mar 3, 2021 · Mar 3, 2021
Modified: Aug 19, 2026

Analyze CVE-2021-26412 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft

Products: exchange server

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (33.0%)

In the news

2 stories

Microsoft: Chinese APT Targeted Exchange Servers With Four Zero

The RecordJan 30, 00:00 UTC · Jan 30, 2023Exploit / PoCCVE-2021-26855 CVE-2021-26857 CVE-2021-26858+43 · 2 reads

60

Threat Advisory: HAFNIUM and Microsoft Exchange zero

Cisco TalosMar 4, 15:58 UTC · Mar 4, 2021AdvisoryExploitedCVE-2021-26855 CVE-2021-26857 CVE-2021-26858+52 · 1 read

60