PoC Exploit Released for Microsoft Exchange Server Elevation of Privilege Vulnerability

A public proof-of-concept exploit is now available for CVE-2026-45504, a high‑severity server-side request forgery vulnerability in Microsoft Exchange Server that enables privilege escalation via arbitrary file reads. The flaw affects on‑premises Exchange Server 2016 and 2019, including Subscription Edition, and is addressed in Microsoft’s June 9, 2026 security updates. CVE-2026-45504 arises from how Exchange integrates […]

The post .