UpHeron
All vulnerabilities

Servers and applications

CVE-2026-87692

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Severity
High 7.8
Published
13 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
15.02.2562.056
Sources
NVD

Affected software

SoftwareAffected versions
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server
  • Version 2016-cumulative_update_23
  • Version 2019-cumulative_update_14
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server_subscription_edition
  • Every version before 15.02.2562.056

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-87692
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-87692