Vulnerability intelligence
CVE-2026-62911
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVSS Score
8
High
EPSS — Exploit Probability
0.7%
Riskier than 52% of all CVEs · checked 2026-10-15
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
3 articles across 2 outlets · first covered Sep 1, 2026 · latest Sep 7, 2026
Coverage timeline
-
Microsoft to Block Outdated Exchange Servers from Cloud Emailsecurityonline.info · Sep 7, 2026
-
Microsoft Patches Nine Cloud Flaws as Exchange Attacks Intensifywww.securityweek.com · Sep 4, 2026
-
Exchange flaw lets attackers run code as SYSTEM via NTLM relay.securityonline.info · Sep 1, 2026