CVE-2026-20293

creationtimestamp| type| source ---|---|--- 2026-09-08 16:42:46+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117236417536820043...

Microsoft Exchange Server Tampering Vulnerability

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

Microsoft Exchange Server Remote Code Execution Vulnerability

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

Microsoft Exchange Server Spoofing Vulnerability

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...

Microsoft Exchange Server Denial of Service Vulnerability

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network...

Microsoft Exchange Server Remote Code Execution Vulnerability

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by babyhack@OPCIA in WordPress Plugin Return Refund and Exchange For WooCommerce versions = 4.6.4...

KLA91270 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

PT-2026-87193

🚨 On-prem Exchange has another “please patch immediately” moment: CVE-2026-55007 lets unauthenticated attackers execute code remotely. Double-free memory bugs: free once, panic twice. https://t.co/0McWeFeyWd MicrosoftSecurity Msrc Cve202655007 https://t.co/4SZ9ynrPay...

Microsoft Exchange Server (September 2026)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. CVE-2026-55007 - External control of file name...

Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...

CVE-2026-86295

creationtimestamp| type| source ---|---|--- 2026-09-06 16:20:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117225003855165015...

CVE-2026-85042

creationtimestamp| type| source ---|---|--- 2026-09-03 19:47:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117208831016095187 2026-09-03 20:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mund7zev6m2o 2026-09-03 22:07:56+00:00| seen|...

Microsoft Exchange Server MRSProxy Pre-Auth NTLM Relay RCE (CVE-2026-62911)

Binary data exchangecve-2026-62911.nbin...

CVE-2026-78689

creationtimestamp| type| source ---|---|--- 2026-09-02 18:07:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukjonpqaf2t 2026-09-02 18:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muklimnqxi2o 2026-09-02 19:12:02+00:00| seen|...

CVE-2026-20275

creationtimestamp| type| source ---|---|--- 2026-09-02 16:36:40+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117202419724203546 2026-09-02 21:03:08+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muktiekvsf2j 2026-09-03 08:45:50+00:00| seen|...

CVE-2026-84795

creationtimestamp| type| source ---|---|--- 2026-09-02 14:03:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117201815744827307 2026-09-02 14:07:26+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muk4b32moo22 2026-09-02 17:10:06+00:00| seen|...