CVE Catalog
CVE-2026-62911
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk0.72%
51th percentile - higher than 51% of all known CVEs
Summary
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Risk Assessment
An attacker could use captured sessions to gain higher privileges, potentially leading to unauthorized access to sensitive data.
Recommendation
Update Microsoft Exchange Server and consider implementing mechanisms to prevent replay attacks.
Original NVD description (English source)
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.