UpHeron
All vulnerabilities

Servers and applications

CVE-2026-87695

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Severity
High 7.8
Published
13 Oct 2026
Last changed
27 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
15.02.2562.056
Sources
NVD

Affected software

SoftwareAffected versions
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server
  • Version 2016-cumulative_update_23
  • Version 2019-cumulative_update_14
  • Version 2019-cumulative_update_15
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server_subscription_edition
  • Every version before 15.02.2562.056

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-87695
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-87695