CVE-2026-55007Patch(microsoft / exchange_server)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft exchange_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55007

Weakness type (CWE)

CWE-415

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

exchange_server
exchange_server_subscription_edition

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-09-09); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

exchange_serverexchange_server_subscription_edition

1 version affected across 2 products

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Patch

375.0%

Disclosure

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-09	2	Patch2
2026-09-10	1	Patch1
2026-09-16	1	Disclosure1

Full discourse4 posts

National CERT/CC@CERT_UG38d
Disclosure
🚨 Patch Now | September 16, 2026 Bringing these vulnerabilities to your attention; - Microsoft Defender ShieldCrash - Gitea (CVE-2026-60004, CVSS 9.8) - Exchange Server (CVE-2026-55007, CVSS 8.1) https://cert.ug | #CyberSafeUG #CERTUGCC https://t.co/Hy5qG1LTN2
Post summary
The post announces three newly disclosed vulnerabilities with CVE IDs and CVSS scores but does not include PoC, exploit tools, active exploitation claims, or specific remediation steps, making it a vulnerability disclosure.
01030129
1.5K followersView on X
Samuel Oyeniran@c0desec44d
Patch
Microsoft patched CVE-2026-55007, an Exchange Server RCE requiring no authentication or user interaction. Potential path: Malicious email → server-side attachment processing → memory corruption → RCE The key question after patching: What can a compromised Exchange server reach next? #CyberSecurity #Microsoft365 #IdentitySecurity #CloudSecurity #Phishing #MFA #MicrosoftSecurity #PenetrationTesting #RedTeam #OffensiveSecurity #ThreatIntelligence #BusinessEmailCompromise #EnterpriseSecurity #RiskManagement #SecurityAwareness #EthicalHacking #IncidentResponse #ITSecurity #Compliance #CorporateSecurity #FinTech #Banking #FinancialServices #BankingSecurity #OilAndGas #EnergySector #CriticalInfrastructure #OTSecurity #IndustrialSecurity #HealthcareSecurity #HealthTech #Manufacturing #SupplyChainSecurity #Telecom #LegalTech #Insurance #CyberInsurance #DigitalTransformation #B2BSecurity #ExecutiveLeadership #Technology #SAPSecurity #PenetrationTesting #VulnerabilityManagement #CVE #MicrosoftExchange #ExchangeServer #ActiveDirectory #EmailSecurity #RemoteCodeExecution
Post summary
Microsoft has issued a patch for CVE-2026-55007, an Exchange Server remote code execution vulnerability that can be triggered by malicious email attachments without authentication, but no active exploitation or proof‑of‑concept is referenced.
01020144
2.9K followersView on X
Windows Forum@windowsforum45d
Patch
🚨 On-prem Exchange has another “please patch immediately” moment: CVE-2026-55007 lets unauthenticated attackers execute code remotely. Double-free memory bugs: free once, panic twice. https://windowsforum.com/news/cve-2026-55007-microsoft-exchange-server-remote-code-execution-vulnerability.444184/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202655007 https://t.co/4SZ9ynrPay
Post summary
This post highlights a new remote code execution flaw (CVE‑2026‑55007) in on‑prem Exchange caused by double‑free bugs, urging users to patch immediately.
00010100
1.4K followersView on X
Venkata Satish Guttula 🛰️@snakeyesV145d
Patch
News: Exchange CVE-2026-55007 lets an unauth attacker run code by emailing a Visio attachment; the server indexes it with no click. Patch Exchange SE and 2019 CUs now. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55007
Post summary
The post reports CVE‑2026‑55007, details how a Visio attachment can trigger remote code execution, and advises applying current Exchange SE and 2019 CU patches.
00000120
3.0K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	exchange_server	2019	-	-
App	microsoft	exchange_server	2019	-	-
App	microsoft	exchange_server_subscription_edition	-	-	-

Explore more

Back to dashboard microsoft CVEs exchange_server vulnerabilities

What researchers are saying

CVE-2026-55007

Samuel Oyeniran[verified]@c0desecPatch

Microsoft has issued a patch for CVE-2026-55007, an Exchange Server remote code execution vulnerability that can be triggered by malicious email attachments without authentication, but no active exploitation or proof‑of‑concept is referenced.

Windows Forum[verified]@windowsforumPatch

This post highlights a new remote code execution flaw (CVE‑2026‑55007) in on‑prem Exchange caused by double‑free bugs, urging users to patch immediately.

Venkata Satish Guttula 🛰️[verified]@snakeyesV1Patch

The post reports CVE‑2026‑55007, details how a Visio attachment can trigger remote code execution, and advises applying current Exchange SE and 2019 CU patches.

National CERT/CC@CERT_UGDisclosure

The post announces three newly disclosed vulnerabilities with CVE IDs and CVSS scores but does not include PoC, exploit tools, active exploitation claims, or specific remediation steps, making it a vulnerability disclosure.