⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More
Summary: Microsoft disclosed CVE-2026-42897, a spoofing bug stemming from a cross-site scripting flaw with a CVSS score of 8.1 affecting on-premise Exchange Server, which is under active exploitation in the wild. Microsoft is offering a temporary mitigation through its Exchange Emergency Mitigation Service while readying a permanent fix, and there are no details on how the vulnerability is being exploited, who is behind the activity, or the scale of the efforts.
What you should know: An on-premise mail server flaw is already being used in the wild, and Microsoft has not disclosed the identity of the attacker, the targets, or whether any attacks succeeded - so you cannot scope your exposure from the advisory alone.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2025-14177CVE-2025-66335CVE-2026-1584CVE-2026-20182CVE-2026-2291CVE-2026-23479CVE-2026-25254CVE-2026-25293CVE-2026-25588CVE-2026-26083CVE-2026-27174CVE-2026-28819CVE-2026-28972CVE-2026-30905CVE-2026-30906CVE-2026-33439CVE-2026-33845CVE-2026-33846CVE-2026-34260CVE-2026-34263CVE-2026-40981CVE-2026-40982CVE-2026-41002CVE-2026-41096CVE-2026-41705CVE-2026-41712CVE-2026-41713CVE-2026-42009CVE-2026-42010CVE-2026-42230CVE-2026-42231CVE-2026-42232CVE-2026-42236CVE-2026-42826CVE-2026-42897CVE-2026-42945CVE-2026-43668CVE-2026-43824CVE-2026-43898CVE-2026-44112CVE-2026-44277CVE-2026-44338CVE-2026-44413CVE-2026-44578CVE-2026-44789CVE-2026-44790CVE-2026-44791CVE-2026-45185CVE-2026-46300CVE-2026-46333CVE-2026-4782CVE-2026-4798CVE-2026-4890CVE-2026-4891CVE-2026-4892CVE-2026-4893CVE-2026-5172CVE-2026-6722CVE-2026-6787CVE-2026-6788CVE-2026-6815CVE-2026-8043CVE-2026-8509CVE-2026-8510
- Related