CVE-2021-26858—Microsoft Exchange Server Remote Code Execution Vulnerability

漏洞名称

Microsoft Exchange Server Remote Code Execution Vulnerability

描述

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26858

相关新闻文章

• Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via KeyloggersJune 24, 2025
• US indicts Black Kingdom ransomware admin for Microsoft Exchange attacksMay 2, 2025
• Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ CountriesNovember 26, 2024
• Salt Typhoon hackers backdoor telcos with new GhostSpider malwareNovember 25, 2024
• AT&T, Verizon reportedly hacked to target US govt wiretapping platformOctober 7, 2024