KNOWN EXPLOITED VULNERABILITY DOSSIER
CVE-2021-26855
Microsoft · Exchange Server
Server-side request forgery (SSRF) flaw in Exchange ('ProxyLogon') allowing unauthenticated attackers to bypass authentication and read mailbox contents.
Correlated Federal Court Cases & Exploitation Context (0)
No federal court indictment in the current archive directly cites CVE-2021-26855. This record tracks its addition to the CISA Known Exploited Vulnerabilities (KEV) catalog on 2021-11-03.
Associated Government Advisories
- AA21-062A CISA Alert →