CVE-2026-62911
Covered in 3 advisories
Radar advisories
- 2026-08-11 ZDI ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability Remote attackers can bypass authentication on Microsoft Exchange without credentials.
- 2026-08-11 ZDI ZDI-26-535: (Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability Authentication can be bypassed to achieve remote code execution on Microsoft Exchange.
- 2026-08-11 ZDI ZDI-26-538: (Pwn2Own) Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability Remote attackers can bypass authentication to gain higher privileges on Microsoft Exchange.
References