Lucene search
HistoryMar 03, 2021 - 12:15 a.m.
CVE-2021-26858
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.223 Low
EPSS
Percentile
96.5%
Microsoft Exchange Server Remote Code Execution Vulnerability
Affected configurations
Node
microsoftexchange_serverMatch2013cumulative_update_23
ORmicrosoftexchange_serverMatch2016cumulative_update_18
ORmicrosoftexchange_serverMatch2016cumulative_update_19
ORmicrosoftexchange_serverMatch2019cumulative_update_7
ORmicrosoftexchange_serverMatch2019cumulative_update_8
Related
cve
cve
CVE-2021-26858
2021-03-03 00:15:12
cisa_kev
cisa_kev
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-11-03 00:00:00
prion
prion
Remote code execution
2021-03-03 00:15:00
attackerkb
attackerkb
CVE-2021-26858
2021-03-03 00:00:00
CVE-2021-26857
2021-03-03 00:00:00
cvelist
cvelist
CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability
2021-03-02 23:55:27
thn
thn
Prometei Botnet Exploiting Unpatched Microsoft Exchange Servers
2021-04-23 07:42:00
URGENT — 4 Actively Exploited 0-Day Flaws Found in Microsoft Exchange
2021-03-03 07:28:00
Microsoft Exchange Cyber Attack — What Do We Know So Far?
2021-03-08 10:15:00
threatpost
threatpost
Prometei Botnet Could Fire Up APT-Style Attacks
2021-04-23 17:15:23
CISA Orders Fed Agencies to Patch Exchange Servers
2021-03-04 17:08:36
Attackers Target ProxyLogon Exploit to Install Cryptojacker
2021-04-15 12:19:13
checkpoint_advisories
checkpoint_advisories
securelist
securelist
Zero-day vulnerabilities in Microsoft Exchange Server
2021-03-04 17:20:57
Black Kingdom ransomware
2021-06-17 10:00:41
IT threat evolution Q1 2021
2021-05-31 10:00:37
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-03-08 07:28:21
Exploit for Vulnerability in Microsoft
2021-03-09 10:36:44
Exploit for Vulnerability in Microsoft
2021-03-05 08:22:07
msrc
msrc
talosblog
talosblog
Threat Advisory: HAFNIUM and Microsoft Exchange zero-day
2021-03-08 10:18:43
akamaiblog
akamaiblog
How Akamai Can Help You Fight the Latest Exploitation Attempts Against Microsoft Exchange
2021-03-15 22:30:00
Microsoft Exchange and Verkada Hacks: Isolate Your Apps and APIs from the Internet Cesspool
2021-03-15 22:15:00
Authentication: Lessons Learned from Microsoft Exchange and F5 BIG-IP Hacks
2021-03-24 14:00:00
ics
ics
cisa
cisa
Microsoft Releases Out-of-Band Security Updates for Exchange Server
2021-03-02 00:00:00
hivepro
hivepro
Have you patched the vulnerabilities in Microsoft Exchange Server?
2021-08-18 11:01:05
krebs
krebs
Microsoft: Chinese Cyberspies Used 4 Exchange Server Flaws to Plunder Emails
2021-03-02 21:19:17
malwarebytes
malwarebytes
Patch now! Exchange servers attacked by Hafnium zero-days
2021-03-03 12:34:27
The top 5 most routinely exploited vulnerabilities of 2021
2022-04-29 16:28:20
Chinese APT's favorite vulnerabilities revealed
2022-10-13 16:15:00
fireeye
fireeye
carbonblack
carbonblack
impervablog
impervablog
mssecure
mssecure
HAFNIUM targeting Exchange Servers with 0-day exploits
2021-03-02 21:07:53
Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021
2021-11-16 16:00:08
Profiling DEV-0270: PHOSPHORUS’ ransomware operations
2022-09-07 21:00:00
mmpc
mmpc
HAFNIUM targeting Exchange Servers with 0-day exploits
2021-03-02 21:07:53
Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021
2021-11-16 16:00:08
Profiling DEV-0270: PHOSPHORUS’ ransomware operations
2022-09-07 21:00:00
rapid7blog
rapid7blog
Rapid7’s InsightIDR Enables Detection And Response to Microsoft Exchange Zero-Day
2021-03-03 00:41:04
Defending Against the Zero Day: Analyzing Attacker Behavior Post-Exploitation of Microsoft Exchange
2021-03-23 14:04:36
Mass Exploitation of Exchange Server Zero-Day CVEs: What You Need to Know
2021-03-03 19:23:42
nessus
nessus
Security Updates for Microsoft Exchange Server (March 2021)
2021-03-03 00:00:00
nuclei
nuclei
Microsoft Exchange Server SSRF Vulnerability
2021-03-06 07:00:59
mskb
mskb
qualysblog
qualysblog
kaspersky
kaspersky
KLA12103 ACE vulnerabilities in Microsoft Exchange Server
2021-03-02 00:00:00
avleonov
avleonov
Vulnerability Management news and publications #2
2022-08-14 11:30:44
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
mscve
mscve
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-03-02 08:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-03-02 08:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-03-02 08:00:00
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.223 Low
EPSS
Percentile
96.5%
Related for NVD:CVE-2021-26858