Microsoft Exchange Server Subscription Edition RTM: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server Subscription Edition RTM ausnutzen, um erweiterte Rechte – einschließlich Administratorrechte – zu erlangen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand auszulösen oder…
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-44839 linked CVEs
Open advisory with all CVEs
More on Subscription
Other advisories
- HighCVE-2026-120466Joomla / WordPress Extension - acymailing.com - Missing authorization on subscription changes in AcyMailing 1.0.0 - 11.1.1 - An unauthenticated attacker who …
- MediumCVE-2026-120469Joomla / WordPress Extension - acymailing.com - Open redirect on the subscription and unsubscription endpoints in AcyMailing 1.0.0 - 11.1.1 - On a default co…
- HighCVE-2026-82977The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-subscription informa…
- HighCVE-2026-14661External control of file name in PostgreSQL dblink and CREATE/ALTER SUBSCRIPTION allows a user to achieve persistent denial of service, via appending invalid…
- HighCVE-2026-118207Microsoft Exchange Server Subscription Edition RTM: Mehrere Schwachstellen
- Not ratedCVE-2026-56926In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device reboot due to a confu…
- Not ratedCVE-2026-126134Thunderbird allowed feed subscriptions to file: URLs that point to a network share. If a user was tricked into subscribing to such a URL, Thunderbird connect…
- CriticalCVE-2026-120002Microsoft SharePoint Server Subscription Edition: fehlerhafte Autorisierung
Other news entries
- CTM360 Exposes Fake Gift Card Scams Exploiting Trusted BrandsNewsBleepingComputer
- Joshin network intrusion may have leaked up to 6 million member recordsBreachpwn.watch
- OpenAI is preparing a $500 ChatGPT Pro Max plan with faster CodexNewsBleepingComputer
- On-prem VeloCloud Orchestrator under attack, only some versions patchedNewsCSO Online
- 17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360NewsThe Hacker News
- Beware these fake websites selling subscriptions to AI assistantsNewsCSO Online
- ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New StoriesNewsThe Hacker News
- ChatGPT Astra is now rolling out to $20 Plus subscriptionNewsBleepingComputer
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4483
ID