CVE-2026-62911

LLM-synthesized narrative grounded in this CVE's description and references.

• Microsoft/Exchange Server38 versions

  cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*+ 37 more

  • cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_22:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_4:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_13:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*
  • (no CPE)
• Microsoft/Exchange Server Subscription Edition

  cpe:2.3:a:microsoft:exchange_server_subscription_edition:*:*:*:*:*:*:*:*

  Range: <15.02.2562.046

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62911nvdPatchVendor Advisory

• Weekly Cybersecurity Newsletter Bulletin – CrowdStrike Falcon, Chrome 0-Day, GPT-6 Astra, Dropbox Breach and 20+ Stories
  Cyber Security News · Sep 7, 2026
• Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecast
  Help Net Security · Sep 6, 2026
• In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
  SecurityWeek · Sep 4, 2026
• September 2026 Patch Tuesday forecast: All we need is more time
  Help Net Security · Sep 4, 2026
• Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)
  Help Net Security · Sep 2, 2026
• 21,000+ Microsoft Exchange Servers Remain Exposed to Active CVE-2026-62911 Exploitation
  Cyber Security News · Sep 1, 2026
• Public PoC Released for Microsoft Exchange Server Pre-auth RCE Vulnerability
  Cyber Security News · Sep 1, 2026
• Cyber Security Weekly Newsletter – Outlook RCE, Palo Alto, Cisco 0-day and Windows 0-Day Flaws +20 Stories
  Cyber Security News · Aug 16, 2026
• Microsoft Exchange Server Vulnerabilities Enable DoS, Privilege Escalation, and RCE Attacks
  Cyber Security News · Aug 13, 2026
• Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
  Cisco Talos Intelligence · Aug 11, 2026
• 421 bugs in Microsoft's Patch Tuesday release, and the Norks have already attacked one
  The Register Security · Aug 11, 2026
• Patch Tuesday - August 2026
  Rapid7 Blog · Aug 11, 2026
• August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
  SecurityWeek · Aug 11, 2026
• Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-Days
  Cyber Security News · Aug 11, 2026
• ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability
  Zero Day Initiative · Aug 11, 2026
• ZDI-26-535: (Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability
  Zero Day Initiative · Aug 11, 2026
• ZDI-26-538: (Pwn2Own) Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability
  Zero Day Initiative · Aug 11, 2026
• August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs
  CrowdStrike Blog