SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-69356

CRITICAL · CVSS 9.3 EPSS 0.70%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

Microsoft Exchange Server is vulnerable to a critical cross-site scripting flaw that allows unauthorized attackers to inject malicious scripts, potentially leading to spoofing attacks over the network. Organizations using Exchange should prioritize patching this vulnerability to mitigate the risk of data breaches and unauthorized access. Immediate action is recommended for any entity relying on this platform for email and communication services.

CVE
CVE-2026-69356
Severity
CRITICAL
CVSS
9.3
EPSS
0.70%
Microsoft Exchange

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.