[NEW] [high] Microsoft Exchange Server: Multiple vulnerabilities

highCVE-2026-62912 CVE-2026-62910 CVE-2026-62914 CVE-2026-62915 CVE-2026-62911 CVE-2026-65813

A remote, authenticated attacker can exploit multiple vulnerabilities in Microsoft Exchange to gain elevated rights—including SYSTEM rights—bypass security measures, execute arbitrary code, manipulate or disclose data, perform spoofing attacks, and trigger a denial-of-service condition.

CSIRTS triage

vendor: Microsoft product: Exchange Server Remote code execution Authentication bypass Privilege escalation Information disclosure Denial of service

What: Multiple vulnerabilities in Microsoft Exchange Server allow authenticated remote attackers to execute arbitrary code, bypass security, escalate privileges, disclose data, perform spoofing, and cause denial of service.
Who is affected: All Microsoft Exchange Server deployments with authenticated user access are affected.
Urgency: High; not yet exploited but provides complete system compromise path including SYSTEM-level code execution.
Action: Apply Microsoft's latest security patches for Exchange Server immediately upon availability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Exchange Server

Get an email when a new Exchange Server advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-08-12
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2784

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2026-629121.3% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 68% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-629100.68% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 49% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-629140.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 26% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-629150.48% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-629110.72% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 51% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-658130.62% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-629130.62% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-62912	coverage & exploitation status	NVD · CVE.org
CVE-2026-62910	coverage & exploitation status	NVD · CVE.org
CVE-2026-62914	coverage & exploitation status	NVD · CVE.org
CVE-2026-62915	coverage & exploitation status	NVD · CVE.org
CVE-2026-62911	coverage & exploitation status	NVD · CVE.org
CVE-2026-65813	coverage & exploitation status	NVD · CVE.org
CVE-2026-62913	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.