HIGH 8.1 Microsoft
CVE-2026-55007
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Security Update 2026-Sep: Microsoft Exchange Server Remote Code Execution Vulnerability
Affected Products
- Microsoft Exchange Server 2019 Cumulative Update 14
- Microsoft Exchange Server 2019 Cumulative Update 15
- Microsoft Exchange Server Subscription Edition RTM
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55007
- https://nvd.nist.gov/vuln/detail/CVE-2026-55007
This high severity vulnerability with a CVSS score of 8.1 was published on 2026-09-08 via Microsoft. Affected: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM.
vulnfeed aggregates 17800 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.