CVE-2026-62910

—

CVSS 3.1

8.8 high

EPSS

<1%p50

Published

Aug 11, 2026 (Aug 11, 2026)

Modified

Aug 14, 2026

Description

Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Vendors: microsoft
Products: exchange server, exchange server subscription edition
Weakness: CWE-99
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.