NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2024-26198

CVSS 3.1: 8.8 high
EPSS: 7%p94
Published: Mar 12, 2024 · Mar 12, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-26198 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft

Products: exchange server

Weakness: CWE-426

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.8%)

In the news

3 stories

March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V

Help Net SecurityMar 26, 12:34 UTC · Mar 26, 2024VulnerabilityExploitedCVE-2024-21338 CVE-2024-21407 CVE-2024-21408+74

60

17,000+ Microsoft Exchange servers in Germany are vulnerable to attack, BSI warns

Help Net SecurityMar 26, 00:00 UTC · Mar 26, 2024Exploit / PoCExploitedCVE-2024-21410 CVE-2024-261984

60

Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024VulnerabilityExploitedCVE-2024-21407 CVE-2024-21408 CVE-2024-21400+93 · 1 read

60