CVE-2026-70279

LOWCVSS 9.3 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70279

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

VulniPulse@vulnipulse20h
CVE advisory: CVE-2026-70279 - microsoft: Microsoft Exchange Server Spoofing Vulnerability. https://vulnipulse.com/advisories/microsoft-cve-2026-70279 #CVE #CyberSecurity #Microsoft #ExchangeServer
1000023
30 followersView on X

Explore more

Back to dashboard