{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreihv36n7iurg2nfbwskbmvzblcsdmlcnoj2tupsb4g4psaf2js2jby",
"uri": "at://did:plc:ghkvexthfanuyq7fb5veq6tw/app.bsky.feed.post/3mluwvtsgppe2"
},
"coverImage": {
"$type": "blob",
"ref": {
"$link": "bafkreig2ymqiz7dfccrb4jrmznx2mgo4gg765btjw4g2pkxtq45bf5lotq"
},
"mimeType": "image/png",
"size": 574587
},
"path": "/2026/05/on-prem-microsoft-exchange-server-cve.html",
"publishedAt": "2026-05-15T06:19:04.000Z",
"site": "https://thehackernews.com",
"textContent": "Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under active exploitation in the wild.\nThe vulnerability, tracked as CVE-2026-42897 (CVSS score: 8.1), has been described as a spoofing bug stemming from a cross-site scripting flaw. An anonymous researcher has been credited with discovering and reporting the issue.\n\"",
"title": "On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email"
}