CVE-2026-62911: Authentication bypass by capture-replay in Microsoft

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

• EPSS 0.7% (52.7% percentile)
• CVSS 8 high

Related briefings

• NightEagle spies pivot from Asia to Russian networks 2026-09-16
• 22,000 Exchange servers still exposed to a public exploit 2026-09-03

Browse the CVE database

Read the full analysis on IntelFusions