← Database
CVE-2026-62910
HIGH
CVSS: 7.2
Published: 2026-08-11
Modified: 2026-08-14
Description
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Affected Platforms
Microsoft Exchange ServerMicrosoft Exchange Server Subscription Edition