M
Jul 14, 2026Microsoft Exchange OWA Zero-Day CVE-2026-42897 Exploited via Crafted Emails
CVE-2026-42897 is a CVSS 8.1 reflected XSS zero-day in Exchange OWA actively exploited in the wild. On-prem Exchange 2016, 2019, and SE are affected. Here's what defenders need to do now.
Jul 14, 20263 min read0 reactions0 comments
