{"uuid": "743adf4f-db1f-4892-851a-856c3a5ae935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-53786", "type": "seen", "source": "https://t.me/pphm_HackerNews/775", "content": "Malicious On-Prem Access Could Secretly Hijack Cloud Exchange Accounts\n\nA serious authentication flaw (CVE-2025-53786) in hybrid Microsoft Exchange setups has been uncovered. It allows attackers who have administrative control of an on-premises Exchange Server to elevate privileges into the connected cloud service, namely Exchange Online \u2014 all undetected by regular audit systems. The issue stems from both environments sharing the same service principal for authentication.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:05.315508Z"}