CVE-2026-62911

HIGH8.0Published on August 11, 2026

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS score8.0 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-294

Microsoft Fixes 421 Vulnerabilities, Including an Exploited Zero-Day in `afd.sys`

On August 11, 2026, Microsoft released security updates addressing 421 vulnerabilities. One of them is CVE-2026-68820 , a high-severity flaw actively

This product uses the NVD API but is not endorsed or certified by the NVD.