Public PoC Released for Microsoft Exchange Server Pre-auth RCE Vulnerability

A public proof-of-concept exploit has been released for CVE-2026-62911, a Microsoft Exchange Server vulnerability linked to an authentication capture-and-replay weakness. While Microsoft classifies the issue as an elevation-of-privilege flaw, the published research describes an attack chain that can lead to unauthenticated remote code execution and a SYSTEM-level compromise on vulnerable Exchange environments. The PoC, published […] The post Public PoC Released for Microsoft Exchange Server Pre-auth RCE Vulnerability appeared first on Cyber Security News.