(Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability

RCE in Microsoft Exchange via unvalidated file path allowing code execution as SYSTEM.

Reporter	Title	Published	Views	Family All 24
GithubExploit	Exploit for Authentication Bypass by Capture-replay in Microsoft	22 Aug 202604:49	–	githubexploit
Information Security Automation	August Microsoft Patch Tuesday	12 Aug 202615:00	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Exchange Server mail server relates to the possibility of bypassing authentication procedures, allowing attackers to increase their privileges.	2 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-62911	11 Aug 202619:00	–	circl
CVE	CVE-2026-62911	11 Aug 202617:06	–	cve
Cvelist	CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability	11 Aug 202617:06	–	cvelist
EUVD	EUVD-2026-56688	11 Aug 202617:06	–	euvd
Tenable Nessus	Microsoft Exchange Server MRSProxy Pre-Auth NTLM Relay RCE (CVE-2026-62911)	3 Sep 202600:00	–	nessus
Tenable Nessus	Security Updates for Microsoft Exchange Server (August 2026)	11 Aug 202600:00	–	nessus
Microsoft KB	Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 11, 2026 (KB5121573)	11 Aug 202614:00	–	mskb