CVE-2026-54998

A vulnerability in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network due to incorrect authorization.

An attacker could gain higher privileges, potentially leading to unauthorized access to sensitive data or takeover of the email system.

Apply security updates provided by Microsoft for Exchange Online and monitor logs for suspicious privilege escalation activities.