CYBERHAWK / CVE / CVE-2026-47631
CVE-2026-47631
HIGH
CVSS 8.1
other
The flaw
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
What to do
Review advisory and patch per vendor guidance.
References
In the news
- Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flawsBleepingComputer · 2026-06-09
- Microsoft Haziran 2026 Patch Tuesday: 3 Zero-Day, 200 Zafiyetcozumpark.com · 2026-06-09
- Microsoft and Adobe Patch Tuesday, June 2026 Security Update ReviewQualys · 2026-06-11