16705 matches found
CVE-2026-62910
CVE-2026-62910 affects Microsoft Exchange Server and stems from improper control of resource identifiers (resource injection). According to the available documents, the issue allows an authorized attacker to elevate privileges over a network, with CVSS v3.1 base metrics: Network attack vector, Lo...
CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
EUVD-2026-56413
Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Description of the security update for Microsoft Exchange Server 2019 CU14: August 11, 2026 (KB5121575)
None None...
Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
Microsoft Exchange Server Security Feature Bypass Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
Description of the security update for Microsoft Exchange Server 2019 CU15: August 11, 2026 (KB5121574)
None None...
Description of the security update for Microsoft Exchange Server 2016 CU23: August 11, 2026 (KB5121576)
None None...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 11, 2026 (KB5121573)
None None...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
Microsoft Exchange Server Denial of Service Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-72772
n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...
CVE-2026-72772 n8n before 2.32.1 Authentication Bypass via Token Exchange
n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...
CVE-2026-72772
n8n
EUVD-2026-56098
n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...
CVE-2026-72772
n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...