AUGUST 24, 2026
Live Feed
Back to database
Case File

CVE-2026-65801

CRITICAL · CVSS 10 EPSS 0.52%

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

Microsoft Exchange Online is vulnerable to a critical server-side request forgery (SSRF) flaw that enables unauthorized attackers to elevate their privileges within the network. This vulnerability poses a significant risk to organizations using Exchange, as it could lead to unauthorized access and potential data breaches. Organizations utilizing Microsoft Exchange should prioritize immediate remediation efforts to mitigate the impact of this critical vulnerability.

CVE
CVE-2026-65801
Severity
CRITICAL
CVSS
10
EPSS
0.52%
Microsoft Exchange

Original NVD Description

Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-68789 CRITICAL CVE-2026-68782 CRITICAL CVE-2026-66800 HIGH CVE-2026-66309 CRITICAL CVE-2026-62834 CRITICAL CVE-2026-76259 HIGH