VulnerabilityBSI CERT-Bund
Microsoft Exchange Server Subscription Edition RTM: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server Subscription Edition RTM ausnutzen, um erweiterte Rechte – einschließlich Administratorrechte – zu erlangen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand auszulösen oder…
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-44839 linked CVEs
Open advisory with all CVEs
More on Subscription
Other advisories
- HighCVE-2026-118207Microsoft Exchange Server Subscription Edition RTM: Mehrere Schwachstellen
- Not ratedCVE-2026-56926In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device reboot due to a confu…
- Not ratedCVE-2026-126134Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into subscribing to such a URL, Thunderbird connect…
- CriticalCVE-2026-120002Microsoft SharePoint Server Subscription Edition: fehlerhafte Autorisierung
- CriticalCVE-2026-120002Microsoft SharePoint Server Subscription Edition: fehlerhafte Autorisierung
- HighCVE-2026-120000Microsoft SharePoint Server Subscription Edition: Deserialisierung nicht vertrauenswürdiger Daten
- HighCVE-2026-120000Microsoft SharePoint Server Subscription Edition: Deserialisierung nicht vertrauenswürdiger Daten
- MediumCVE-2026-124210Microsoft SharePoint Server Subscription Edition: Server-Side-Request-Forgery (SSRF)
Other news entries
- CTM360 Exposes Fake Gift Card Scams Exploiting Trusted BrandsNewsBleepingComputer
- Joshin network intrusion may have leaked up to 6 million member recordsBreachpwn.watch
- OpenAI is preparing a $500 ChatGPT Pro Max plan with faster CodexNewsBleepingComputer
- On-prem VeloCloud Orchestrator under attack, only some versions patchedNewsCSO Online
- 17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360NewsThe Hacker News
- Beware these fake websites selling subscriptions to AI assistantsNewsCSO Online
- ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New StoriesNewsThe Hacker News
- ChatGPT Astra is now rolling out to $20 Plus subscriptionNewsBleepingComputer
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4483
ID