On‑Prem Microsoft Exchange Server CVE‑2026‑42897 Actively Exploited

Overview Microsoft has disclosed a new vulnerability in on‑premises Exchange Server, tracked as CVE‑2026‑42897 (CVSS 8.1). The flaw, stemming from a cross‑site scripting (XSS) bug, […]