Over 21,000 unpatched Exchange servers expose critical SYSTEM-level flaw
A critical security vulnerability in Microsoft Exchange servers allows attackers to bypass authentication and achieve SYSTEM-level remote code execution. The flaw, tracked as CVE-2026-62911, affects Exchange Server 2016, 2019, and SE versions. In September 2026, over 21,800 internet-facing servers remained unpatched, primarily in the United States and Germany. While fixes exist for supported versions, many servers, especially outdated ones, lack a straightforward update path. Security experts recommend immediate patching or restricting internet access to the vulnerable MRSProxy component.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in