sign in--:--:--UTC

CVE-2026-42897

exploited in the wild

CVSS

8.1

Reports

8

First seen

May 15

Last seen

Jun 10

Affected product

Microsoft Exchange Server

Associated actors

ShinyHunters ×1 TeamPCP ×1 UAT-8616 ×1

Recent reports

Microsoft patches Exchange Server zero-day exploited in attacks

Bleeping ComputerJun 10 High

Microsoft Releases June 2026 Security Updates; CVE-2026-42897 Exploited in Wild

JPCERT/CC AlertsJun 10 High

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

The Hacker NewsMay 21 High

Weekly Threat Recap: Exchange 0-Day, npm Supply Chain Attacks, Cisco Exploits

The Hacker NewsMay 18 Critical

Microsoft Exchange Server Critical Vulnerability CVE-2026-42897

Canadian Centre AlertsMay 15 High

CISA Adds CVE-2026-42897 Microsoft Exchange Server XSS to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesMay 15 High

Microsoft Exchange Server CVE-2026-42897 XSS Spoofing Vulnerability Actively Exploited

The Hacker NewsMay 15 High

Microsoft Exchange Server Spoofing Vulnerability (CVE-2026-42897) Exploited in the Wild

GovCERT.HKMay 15

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans