CVSS 9.3 (critical) · published 2026-10-13
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Weakness: CWE-79
Source: NVD CVE-2026-70279
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.