CVE-2021-26412

CriticalCVSS 9.1

Published: 03/03/2021(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

30.40%

98th percentile - higher than 98% of all known CVEs

Remote code execution vulnerability in Microsoft Exchange Server. Allows an attacker to execute arbitrary code on the server.

Risk of full compromise of the mail server, potentially leading to data breaches and further attacks.

Apply security updates provided by Microsoft for Exchange Server.

Original NVD description (English source)

Microsoft Exchange Server Remote Code Execution Vulnerability