CVE-2026-88830

A unit confusion vulnerability in BusyBox TLS affects Microsoft Exchange, leading to a pre-authentication heap buffer overflow when handling a specially crafted ClientKeyExchange message. This flaw can be exploited by an attacker to execute arbitrary code, potentially compromising the affected system. Organizations using Exchange should prioritize patching this vulnerability to mitigate the risk of exploitation.