CERT24U.S. CISA Adds a Microsoft Exchange Server Flaw to Its Known Exploited Vulnerabilities CatalogLoading data…
CERT24Threat Observatory
Period

U.S. CISA Adds a Microsoft Exchange Server Flaw to Its Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Microsoft Exchange Server vulnerability CVE-2026-42897 to its Known Exploited Vulnerabilities (KEV) catalog. Microsoft confirmed that the vulnerability is being actively exploited.

← Back to intelligence

U.S. CISA Adds a Microsoft Exchange Server Flaw to Its Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Microsoft Exchange Server vulnerability CVE-2026-42897 to its Known Exploited Vulnerabilities (KEV) catalog. Microsoft confirmed that the vulnerability is being actively exploited.