Authorization Bypass in Microsoft Exchange Server by Microsoft

CVE-2026-118150

What is CVE-2026-118150?

An authorization bypass vulnerability in Microsoft Exchange Server can be exploited by an authorized attacker to elevate their privileges across the network. This flaw enables malicious actors to manipulate user-controlled keys, thereby gaining access to restricted resources or functionalities. Organizations using affected versions of Microsoft Exchange Server should promptly review the Microsoft advisory and implement available patches to safeguard their systems from potential exploitation.

References