CVE-2026-70279 — Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a netw…

Published: 2026-10-13 · CVSS: 9.3 · CVSS 3.1

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision ccc9bdb4c4f8cb214cf2c1e7d07daea789e675ef