CVE-2026-42897

LLM-synthesized narrative grounded in this CVE's description and references.

• Microsoft/Exchange Server40 versions

  cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*+ 39 more

  • cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_22:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_4:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_13:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_14:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*
  • (no CPE)
• Microsoft/Exchange Server Subscription Edition

  cpe:2.3:a:microsoft:exchange_server_subscription_edition:*:*:*:*:*:*:*:*

  Range: <15.02.2562.043

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897nvdMitigationVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• ⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
  The Hacker News · Aug 3, 2026
• 3rd August – Threat Intelligence Report
  Check Point Research · Aug 3, 2026
• Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released
  Help Net Security · Aug 2, 2026
• Breach Roundup: OpenAI Models on a Hacking Tear
  GovInfoSecurity · Jul 31, 2026
• Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)
  Help Net Security · Jul 30, 2026
• Russian spies take their half-click email attack from Zimbra to Outlook
  The Register Security · Jul 30, 2026
• Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
  The Hacker News · Jul 30, 2026
• TA488 May Have Exploited Outlook Web Access 0-Day Flaw Before Microsoft’s Emergency Patch
  Cyber Security News · Jul 30, 2026
• Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
  BleepingComputer · Jul 29, 2026
• Russian-Alligned TA488 Returns With Persistent Outlook Web Access Attack
  Infosecurity Magazine · Jul 29, 2026
• Laundry Bear’s webmail hackers had more in store after February, report says
  The Record · Jul 29, 2026
• Breach Roundup: CISA Says Agencies Should 'Patch Smarter'
  GovInfoSecurity · Jun 12, 2026
• Microsoft Patches Exploited Exchange Server Vulnerability
  SecurityWeek · Jun 11, 2026
• Microsoft patches Exchange Server zero-day exploited in attacks
  BleepingComputer · Jun 10, 2026
• Record Microsoft Patch Tuesday, fresh zero-day
  Help Net Security · Jun 10, 2026
• Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flaws
  BleepingComputer · Jun 9, 2026
• June 2026 Patch Tuesday forecast: Where are the CVEs?
  Help Net Security · Jun 5, 2026
• Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
  The Hacker News · May 21, 2026
• Microsoft Exchange Zero-Day Under Attack, No Patch Available
  Dark Reading · May 18, 2026
• ⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More
  The Hacker News · May 18, 2026
• Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited
  Help Net Security · May 17, 2026
• Microsoft Reports Severe Zero-Day Flaw in On-Prem Exchange Servers
  Infosecurity Magazine · May 15, 2026
• Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild
  SecurityWeek · May 15, 2026
• Unpatched Microsoft Exchange Server vulnerability exploited (CVE-2026-42897)
  Help Net Security · May 15, 2026
• Microsoft warns of Exchange zero-day flaw exploited in attacks
  BleepingComputer · May 15, 2026
• On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
  The Hacker News · May 15, 2026
• Microsoft CVE-2026-42897 Added to CISA KEV Under Active Exploitation
  Vypr Intelligence · May 14, 2026
• CISA Adds One Known Exploited Vulnerability to Catalog
  CISA Alerts