Advertisement
CRITICAL
Vulnerabilities
CVE-2026-42897: Microsoft Exchange OWA XSS Zero-Day Under Attack
Active Zero-Day XSS vulnerability, CVE-2026-42897, impacts Microsoft Exchange OWA, allowing mailbox compromise. No patch available.
Runtime Rebel Intel
5 min read·May 19, 2026
VU
CRITICAL
Vulnerabilities
CVE-2026-42897: Microsoft Exchange XSS Under Active Exploitation
CISA adds CVE-2026-42897, a Microsoft Exchange Server Cross-Site Scripting vulnerability, to KEV Catalog due to active exploitation. Immediate patching advised.
Runtime Rebel Intel
4 min read·May 15, 2026
VU
CRITICAL
Vulnerabilities
CVE-2026-42897: Microsoft Exchange Server Zero-Day Exploited in Wild
Microsoft warns of CVE-2026-42897, a critical Exchange Server zero-day exploited in the wild. Implement Extended Protection mitigations immediately to secure systems.
Runtime Rebel Intel
3 min read·May 15, 2026
CRITICAL
Vulnerabilities
CVE-2026-42897: How Attackers Exploit Microsoft Exchange Server
Microsoft warns of active exploitation of CVE-2026-42897, a critical spoofing and XSS vulnerability in on-premise Exchange Server triggered via email.
Runtime Rebel Intel
3 min read·May 15, 2026