ZDI-26-194 MEDIUM 5.3 Published Mar 16, 2026

Microsoft Exchange InterceptorSmtpAgent Improper Input Validation Security Feature Bypass Vulnerability

Microsoft

A medium-severity vulnerability (CVE-2026-21527) in Microsoft Exchange allows unauthenticated remote attackers to bypass a security feature, potentially enabling unauthorized access or further system compromise. This is particularly dangerous because no credentials are needed to exploit it. Security teams should prioritize patching affected Exchange installations immediately and monitor for any suspicious activity targeting this vulnerability in the meantime.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy