- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, Microsoft Exchange Online recorded 2 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Microsoft Exchange Online and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-96185Microsoft Exchange Online Remote Code Execution VulnerabilityCVE-2026-65801Microsoft Exchange Online Elevation of Privilege VulnerabilityCVE-2026-56191Microsoft Exchange Online Tampering VulnerabilityCVE-2026-54998Microsoft Exchange Online Elevation of Privilege VulnerabilityCVE-2026-48582Microsoft Exchange Online Elevation of Privilege Vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-96185Microsoft Exchange Online Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published10/22/2026 | SeverityHigh |
CVE-2026-65801Microsoft Exchange Online Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published08/20/2026 | SeverityCritical |
CVE-2026-56191Microsoft Exchange Online Tampering Vulnerability | Exploitation statusNot exploited | FixYes | Published07/24/2026 | SeverityCritical |
CVE-2026-54998Microsoft Exchange Online Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published07/02/2026 | SeverityHigh |
CVE-2026-48582Microsoft Exchange Online Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published06/19/2026 | SeverityCritical |
CVE-2026-48579Microsoft Exchange Online Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published06/04/2026 | SeverityCritical |
CVE-2026-26137Microsoft Exchange Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published03/19/2026 | SeverityCritical |
7 Results | Page 1 of 1