CVE-2026-45502

MediumCVSS 5.0

Published: 09/06/2026(UTC)Updated: 28/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

20.26%

97th percentile - higher than 97% of all known CVEs

A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

The risk is the possibility of disclosing sensitive internal data by sending requests to internal resources.

It is recommended to apply security updates from Microsoft for Exchange Server.

Original NVD description (English source)

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.