CVE Catalog
CVE-2026-62910
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk0.70%
50th percentile - higher than 50% of all known CVEs
Summary
Improper control of resource identifiers (resource injection) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could manipulate server resources, potentially leading to privilege escalation and unauthorized data access.
Recommendation
Install security updates for Microsoft Exchange Server and restrict access to resources.
Original NVD description (English source)
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.