Signalis
sign in--:--:--UTC
CVEs

CVE-2026-42897

exploited in the wild☆ pin
CVSS
9.8
Reports
16
First seen
May 15, 2026
Last seen
Aug 7, 2026
Affected product

Microsoft Outlook Web Access (OWA)

Associated actors

Void Blizzard ×4TA488 ×2ShinyHunters ×2Clop ×1Cloud Atlas ×1CL-STA-1114 ×1Dysphoria ×1Evil Corp ×1Ghostwriter ×1JADEPUFFER ×1Mustang Panda ×1NSO Group ×1Storm-2945 ×1TeamPCP ×1UAT-7810 ×1UAT-8616 ×1UNC4221 ×1UNC5792 ×1UNK_MassTraction ×1APT29 ×1

Recent reports

Critical

July 2026 CVE Landscape: 85 High-Impact Vulnerabilities Actively Exploited

Recorded Future InsiktCritical

Weekly Cybersecurity Recap: AI Model Breaches, Water-System Attacks, Ransomware, and Critical Vulnerabilities

The Hacker NewsHigh

Threat Intelligence Report – Week of 27 July: Critical Vulnerabilities, Water Utility Attacks, and Breach Activity

Check Point ResearchCritical

Russian state hackers exploit max-severity Exchange Server flaw for persistent OWA backdoor

Proofpoint Threat InsightCritical

Russian Hackers Exploit Microsoft OWA Flaw to Maintain Persistent Mailbox Access

The Hacker NewsCritical

Russian Laundry Bear exploits Exchange OWA zero-day for persistent mailbox access

Bleeping ComputerCritical

Laundry Bear exploits Microsoft OWA vulnerability with sophisticated OWAReaper implant

The Record (Recorded Future News)High

CERT-EU Cyber Brief June 2026 – Multi-Sector Espionage, Ransomware, and Zero-Days

CERT-EU Threat IntelHigh

Microsoft patches Exchange Server zero-day exploited in attacks

Bleeping ComputerHigh

Microsoft Releases June 2026 Security Updates; CVE-2026-42897 Exploited in Wild

JPCERT/CC AlertsHigh

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

The Hacker NewsHigh

Weekly Threat Recap: Exchange 0-Day, npm Supply Chain Attacks, Cisco Exploits

The Hacker NewsCritical

Microsoft Exchange Server Critical Vulnerability CVE-2026-42897

Canadian Centre AlertsHigh

CISA Adds CVE-2026-42897 Microsoft Exchange Server XSS to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesHigh

Microsoft Exchange Server CVE-2026-42897 XSS Spoofing Vulnerability Actively Exploited

The Hacker NewsHigh

Microsoft Exchange Server Spoofing Vulnerability (CVE-2026-42897) Exploited in the Wild

GovCERT.HK

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans