NetSight
high7.5

CVE-2026-87696

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Impact

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Affected products

VendorProductAffected versions
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23
from 15.01.0.0 before 15.01.2507.077
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 14
from 15.02.0.0 before 15.02.1544.050
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 15
from 15.02.0.0 before 15.02.1748.055
MicrosoftMicrosoft Exchange Server Subscription Edition RTM
from 15.02.0.0 before 15.02.2562.056
MicrosoftExchange Server
Versions 2016, 2019
MicrosoftExchange Server Subscription Edition
before 15.02.2562.056

Weakness classification

References