PT-2026-143723
CVE-2026-118149
·
Published
2026-11-10
·
Updated
2026-11-12
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Microsoft Exchange Server Subscription Edition versions prior to 15.02.2562.057
Description
Improper control of code generation allows an authorized attacker to execute code over a network via code injection, which is the process of inserting malicious code into a computer program to change its intended execution flow.
Recommendations
Update Microsoft Exchange Server Subscription Edition to version 15.02.2562.057.
Found an issue in the description? Have something to add? Feel free to write us 👾