{"uuid": "945eb998-a5fa-4405-8a00-f5f37ee39e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/117197334662384620", "content": "\u26a0\ufe0f PATCH NOW\nMicrosoft Exchange has an auth-bypass flaw (CVE-2026-62911) that relays a server's own account into a webshell running as SYSTEM.\nA public exploit just dropped, and 21,899 servers are still exposed.\nPatch, then turn on Extended Protection.\nhttps://suriq.io/blog/exchange-cve-2026-62911-auth-bypass-webshell-poc\n#CVE #Windows #infosec #cybersecurity", "creation_timestamp": "2026-09-01T20:36:07.132176Z"}