Back to the CVE list
CVE-2026-42897 CISA KEV · Actively exploited

Microsoft Exchange Server Spoofing Vulnerability

CVSS score

8.1

EPSS probability

%0.5

Risk score

0.1

Published

5 mo ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

Ars Technica30.07.2026

Max-severity Exchange server flaw under active exploitation by Kremlin hackers

Exploits can give persistent server access that survives credential rotation and disk re-imaging.

Security.NL30.07.2026

'Europese overheidsinstanties doelwit van Outlook Web Access XSS-aanval'

Europese overheidsinstanties zijn vorige week het doelwit geweest van een aanval waarbij misbruik werd gemaakt van een ...

The Hacker News30.07.2026

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, hospitality, and aerospace sectors. The activity, which began on July 22, 2026, involves the

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-42897"