CVE-2021-26855

exploited in the wild☆ pin
CVSS
9.8
Reports
15
First seen
Mar 3, 2021
Last seen
Oct 8, 2026
Affected product

Microsoft Exchange Server

Associated actors

Recent reports

Critical

U.S. Offers $10M Reward for Information on Zhang Yu, Charged in HAFNIUM Exchange Hacks

The Hacker News
Critical

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

The Hacker News
High

H1 2026 Malware and Vulnerability Trends Report

Recorded Future Insikt
Critical

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The Hacker News
Critical

Five Years, 88,000 Backdoors, and a Pair of Handcuffs: Inside the Global Manhunt That Ended in an Arrest

Huntress Blog
High

StrikeShark Campaign Exploits Known Vulnerabilities to Deploy Cobalt Strike via SharkLoader

HKCERT
High

June 2026 CVE Landscape: 60 High-Impact Vulnerabilities Actively Exploited

Recorded Future Insikt
High

SharkLoader Malware Deploys Cobalt Strike in StrikeShark Campaign

The Hacker News
High

StrikeShark: New SharkLoader Campaign Delivering Cobalt Strike via Exploited Applications

Kaspersky Securelist
High

SHADOW-EARTH-053: China-Aligned Cyberespionage Campaign Against Asian Government and Defense Sectors

Trend Micro Research
High

2025 Cloud Threat Hunting and Defense Landscape

Recorded Future Insikt
High

29 Most Frequently Exploited Vulnerabilities by Hackers (2020–2021): Joint Advisory

NICS Taiwan
Critical

Microsoft Exchange Server Remote Code Execution Vulnerabilities (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065)

NICS Taiwan
Critical

Multiple Vulnerabilities in Microsoft Exchange Server (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065)

GovCERT.HK
Critical

Rapid Response: Mass Exploitation of On-Prem Exchange Servers

Huntress Blog

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.