SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-55008

CRITICAL · CVSS 9.6 EPSS 0.85%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

Microsoft Exchange Server is vulnerable to a critical cross-site scripting (XSS) flaw that allows unauthorized attackers to execute spoofing attacks over the network. This vulnerability can lead to significant security breaches, including unauthorized access to sensitive information and user impersonation. Organizations using Microsoft Exchange should prioritize patching this vulnerability to mitigate potential exploitation risks.

CVE
CVE-2026-55008
Severity
CRITICAL
CVSS
9.6
EPSS
0.85%
Microsoft Exchange

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-87654 CRITICAL CVE-2026-87653 MEDIUM CVE-2026-87648 HIGH CVE-2026-87644 HIGH CVE-2026-87621 CRITICAL CVE-2026-87618 HIGH