← ExploitWatch
HomeExploited Vulnerabilities

CVE-2021-26855 — Actively Exploited: Exchange Server (Microsoft)

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE IDCVE-2021-26855
VendorMicrosoft
ProductExchange Server
Vulnerability nameMicrosoft Exchange Server Remote Code Execution Vulnerability
Date added2021-11-03
Remediation due2022-05-03
Known ransomware useKnown
Required actionApply updates per vendor instructions.
DescriptionMicrosoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →