Microsoft Warns of Severe Zero-Day Flaw in On-Prem Exchange Servers

Microsoft just sounded the alarm on a severe zero-day flaw in on-prem Exchange servers, warning that a high-severity vulnerability could let attackers send malicious code to victims via specially crafted emails. This flaw, tracked as CVE-2026-42897, has already been automatically mitigated if the EM Service is enabled,…

https://osintsights.com/microsoft-warns-of-severe-zero-day-flaw-in-on-prem-exchange-servers?utm_source=mastodon&utm_medium=social

#ZeroDay #ExchangeServerVulnerability #Cve202642897 #CrosssiteScripting #Microsoft

Microsoft Exchange Servers Targeted by Active CVE-2026-42897 Exploit

Microsoft warns of a high-severity vulnerability, CVE-2026-42897, in its Exchange Servers, allowing attackers to spoof network communications via a cleverly crafted email. This cross-site scripting flaw has been actively exploited, earning a concerning CVSS score of 8.1.

https://osintsights.com/microsoft-exchange-servers-targeted-by-active-cve-2026-42897-exploit?utm_source=mastodon&utm_medium=social

#Cve202642897 #MicrosoftExchange #CrosssiteScripting #SpoofingVulnerability #Exploit