A high-severity vulnerability, identified as CVE-2026-62911 with a CVSS score of 8.0, affects the authentication mechanism in Microsoft Exchange Server. This flaw enables an authorized attacker to bypass security controls and elevate privileges over a network by capturing and replaying authentication credentials, thereby compromising business continuity through potential unauthorized access to sensitive data. The vulnerability is categorized as an authentication bypass by capture-replay issue, which allows attackers to exploit this weakness to gain elevated privileges over the network. This flaw has significant implications for business operations, as it can lead to unauthorized access to sensitive information and disrupt business continuity.
We recommend you to refer this link: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62911[/subscribe_to_unlock_form]
A high-severity vulnerability, identified as CVE-2026-62911 with a CVSS score of 8.0, affects the authentication mechanism in Microsoft Exchange Server. This flaw enables an authorized attacker to bypass security controls and elevate privileges over a network by capturing and replaying authentication credentials, thereby compromising business continuity through potential unauthorized access to sensitive data. The vulnerability is categorized as an authentication bypass by capture-replay issue, which allows attackers to exploit this weakness to gain elevated privileges over the network. This flaw has significant implications for business operations, as it can lead to unauthorized access to sensitive information and disrupt business continuity.
We recommend you to refer this link: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62911[emaillocker id="1283"]
The following reports contain further technical details:
[/emaillocker]