CVE Catalog

CVE-2021-26854

MediumCVSS 6.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
19.57%

97th percentile - higher than 97% of all known CVEs

Summary

Remote code execution vulnerability in Microsoft Exchange Server. An attacker can exploit this flaw to execute arbitrary code on the server.

Risk Assessment

Risk of full server compromise, potentially leading to data theft, malware installation, or service disruption.

Recommendation

Immediately install security updates for Microsoft Exchange Server.

Original NVD description (English source)

Microsoft Exchange Server Remote Code Execution Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS