SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-63523

MEDIUM · CVSS 6.5 EPSS 0.67%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Skype for Business is vulnerable to cross-site scripting due to improper input neutralization during web page generation, enabling unauthorized attackers to execute spoofing attacks over the network. This could lead to the manipulation of user sessions or the distribution of malicious content. Organizations using Skype for Business should prioritize addressing this vulnerability to protect their users from potential exploitation.

CVE
CVE-2026-63523
Severity
MEDIUM
CVSS
6.5
EPSS
0.67%

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-75624 HIGH CVE-2026-87654 CRITICAL CVE-2026-87653 MEDIUM CVE-2026-87648 HIGH CVE-2026-87644 HIGH CVE-2026-87621 CRITICAL