CVE-2026-56191

Technical details about CVE-2026-56191 are not provided in the connected documents. Public information here only cites improper authentication and tampering risk for Microsoft Exchange Online. Monitor for updates from official advisories.

CVE-2026-48582

This CVE affects Microsoft Exchange Online. Missing authorization could allow an attacker with low privileges and network access (no user interaction) to elevate privileges (impact: high confidentiality and integrity, no availability impact) per CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N, base...

CVE-2026-65801

CVE-2026-65801 is a critical (CVSS 3.1: 10.0) server-side request forgery (SSRF) vulnerability in Microsoft Exchange Online that allows an unauthorized, unauthenticated attacker to elevate privileges over a network . The attack requires no user interaction, no prior privileges, and has low comple...

CVE-2026-54998

CVE-2026-54998 describes an incorrect authorization in Microsoft Exchange Online that enables an authorized attacker to elevate privileges over a network. This vulnerability impacts Exchange Online’s authorization checks, allowing escalation of access from an existing authorized state. The CVSS 3...

CVE-2026-48579

CVE-2026-48579 affects Microsoft Exchange Online and represents an information disclosure vulnerability due to improper authorization. The available data indicate an unauthenticated attacker could disclose information over the network, with a CVSS 3.1 base score of 9.1 (CRITICAL) and impact limit...