CVE-2026-69355

Published: Sep 8, 2026Modified: Sep 30, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: secure@microsoft.com (Secondary)

Description

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

Products: Microsoft: Exchange Server, Exchange Server Subscription Edition

2 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Exchange Server	Version 2016 cumulative_update_23
Microsoft Exchange Server	Version 2019 cumulative_update_14
Microsoft Exchange Server	Version 2019 cumulative_update_15
Microsoft Exchange Server Subscription Edition	version < 15.02.2562.049

Source: secure@microsoft.com

PatchVendor Advisory

No history available yet.