← Database

CVE-2026-54998

HIGH CVSS: 8.8 Published: 2026-07-02 Modified: 2026-07-07

Description

Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Exchange Online

Weakness Type

CWE-863

References