CRITICAL 9.3 CVE-2026-70279 Published 13 Oct 2026

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Worried this affects your website?

Microsoft Exchange Server contains an improper neutralization of input during web page generation vulnerability, a cross-site scripting (XSS) flaw.

An unauthorized attacker can exploit this issue over a network to perform spoofing.

Reference: CVE-2026-70279 on NVD

← Back to Security News