CVE Catalog
CVE-2026-65801
CriticalCVSS 10.0Summary
Server-side request forgery (SSRF) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
Risk of unauthorized access to internal resources and privilege escalation in the Exchange environment.
Recommendation
Apply security patches from Microsoft and restrict outbound network traffic from Exchange servers.
Original NVD description (English source)
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.