thehackernews.com·May 15, 2026
Microsoft has revealed a critical security vulnerability (CVE-2026-42897) in on-premise Exchange Server versions, which is being actively exploited and is classified as a spoofing bug due to a cross-site scripting flaw, with a CVSS score of 8.1. The issue was reported by an anonymous researcher.
For a professional focused on cybersecurity, the key actionable takeaway is the urgent need to address the newly disclosed CVE-2026-42897 vulnerability in on-premise Exchange Servers, as it is actively exploited and has a high severity score of 8.1. Immediate steps should include patching affected systems, updating security protocols, and closely monitoring for any signs of exploitation to mitigate potential data breaches or security incidents.