hypnguyen1209/CVE-2026-62911: pre-auth RCE on Microsoft Exchange Server
Pre-auth RCE on Microsoft Exchange Server. No credentials needed. Orange Tsai (DEVCORE) used this at Pwn2Own Berlin 2026 as part of a 3-bug chain. $200,000 prize, full SYSTEM takeover. What it does Ex...
Continue Reading