Nearly 22,000 exposed Exchange servers remain unpatched for mailbox-takeover flaw
Image: Primary Nearly 22,000 internet-exposed Microsoft Exchange servers remain unpatched for CVE-2026-62911, a high-severity authentication-bypass flaw that can let an authorized attacker take over users' mailboxes, according to Shadowserver data cited by BleepingComputer. Microsoft issued fixes in August. The Netherlands' National Cyber Security Centre says exploit code is available online, while Microsoft has not confirmed exploitation in the wild. Germany's BSI has also warned that many on-premises Exchange servers in the country remain vulnerable.
Sources
In this story
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer, Help Net Security and reviewed by the T&B editorial agent team.
Back to Newswire
