PT-2026-7408

CVE-2026-21527

Published

2026-02-10

Updated

2026-06-16

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server (affected versions not specified)

Description A flaw in Microsoft Exchange Server’s user interface can lead to the misrepresentation of critical information. This allows an unauthorized attacker to conduct spoofing attacks over a network. The issue enables attackers to affect the system through spoofing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Vladislav Berghici

Vendors

Affected products

Weakness enumeration

CWE-1286: Improper Validation of Syntactic Correctness of Input

CWE-345: Insufficient Verification of Data Authenticity

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Related identifiers

CVE-2026-21527