ZDI-26-194
MEDIUM 5.3
Published
Mar 16, 2026
Microsoft Exchange InterceptorSmtpAgent Improper Input Validation Security Feature Bypass Vulnerability
Microsoft
A medium-severity vulnerability (CVE-2026-21527) in Microsoft Exchange allows unauthenticated remote attackers to bypass a security feature, potentially enabling unauthorized access or further system compromise. This is particularly dangerous because no credentials are needed to exploit it. Security teams should prioritize patching affected Exchange installations immediately and monitor for any suspicious activity targeting this vulnerability in the meantime.