{"id":"CVE-2026-77910","published":"2026-10-13T19:19:54.057","lastModified":"2026-10-14T04:18:36.717","description":"Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77910","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Microsoft Exchange Server contains an authorization flaw that allows an authenticated attacker to escalate their privileges over a network, potentially leading to full system compromise. This vulnerability specifically affects how the server handles authorization checks for certain network operations.","exploitability":"Exploitation requires an initial authenticated session and is moderately difficult to achieve, as it involves crafting specific network requests that bypass authorization controls while maintaining active session state.","blast_radius":"If exploited, this vulnerability could allow attackers to gain elevated privileges across the Exchange server, potentially enabling them to access sensitive email data, modify system configurations, or even take full control of the server environment.","remediation":"Apply the Microsoft Exchange Server cumulative update released in the July 2026 security updates, specifically version 15.00.1497.000 or later, which contains the fix for this authorization flaw.","detection":"Monitor for unusual authentication patterns in Exchange server logs, particularly around the /EWS/ and /RPC/ endpoints where the authorization bypass occurs, looking for repeated failed authorization attempts followed by successful elevated access requests.","tags":["exchange","authorization","privilege-escalation","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:57:45.409Z"}}