CVE-2024-26198

—

CVSS 3.1

8.8 high

EPSS

7%p94

Published

Mar 12, 2024 (Mar 12, 2024)

Modified

Jun 17, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: exchange server
Weakness: CWE-426
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.8%)

In the news3 stories

March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V

Help Net SecurityMar 26, 12:34 UTC · Mar 26, 2024Vulnerability in the wildCVE-2024-21338 CVE-2024-21407 CVE-2024-21408+7 CVEs

60

17,000+ Microsoft Exchange servers in Germany are vulnerable to attack, BSI warns

Help Net SecurityMar 26, 00:00 UTC · Mar 26, 2024Exploit / PoC in the wildCVE-2024-21410 CVE-2024-26198

60

Microsoft's March Updates Fix 61 Vulnerabilities, Including Critical Hyper

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024Vulnerability in the wildCVE-2024-21407 CVE-2024-21408 CVE-2024-21400+9 CVEs

60