CVE · coverage timeline
CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting Vulnerability
14 articles from 8 outlets between 15 May and 30 Jul. First reported by The Hacker News, the day CISA added it to KEV. The busiest day was Fri 15 May, with 7 articles.
- Articles
- 14
- all time · from 8 outlets
- Days with coverage
- 6
- across 77 days
- Busiest day
- 7
- articles on Fri 15 May
- Last 7 days
- 0a day
- vs 0.1 a day before
- First report to KEV
- 0days
- listed 15 May
- Federal deadline
- Passed
- Fri 29 May · 149 days ago
Coverage over time
14 articles · 15 May – 30 Jul
- First report15 May · The Hacker News
- Added to CISA KEV15 May · cisa.gov
- Federal deadlineFri 29 May, 23:59 UTC
Show as table
| Day (UTC) | Articles | Outlets |
|---|---|---|
| Fri 15 May | 7 | CISA 3, The Hacker News 1, SecurityWeek 1, Infosecurity 1, Security Affairs 1 |
| Sat 16 May | 1 | Security Affairs 1 |
| Mon 18 May | 2 | The Hacker News 1, Dark Reading 1 |
| Thu 11 Jun | 1 | SecurityWeek 1 |
| Wed 29 Jul | 2 | SecurityOnline 1, Infosecurity 1 |
| Thu 30 Jul | 1 | Ars Technica 1 |
Articles
14 articles1 article
2 articles
1 article
2 articles
- Microsoft Exchange zero day bug exploited in the wildThe Hacker News
1 article
- CISA flags Exchange zero day flaw CVE-2026-42897 in KEV listSecurity Affairs
7 articles
- CISA adds Exchange XSS flaw CVE‑2026‑42897 to KEV listCISA · official notice
- CISA flags CVE‑2026‑42897 in Exchange, urges immediate patchCISA · official notice
- CISA Adds MS Exchange XSS Flaw CVE-2026-42897 to KEV CatalogCISA · official notice
- CVE-2026-42897: Microsoft warns of active Exchange XSS flawSecurity Affairs
- Microsoft patches Exchange Server XSS spoof flaw CVE-2026-42897The Hacker News · first report
No articles in this range.