Skip to content
VulniPulse
Medium6.5Microsoft Server

Medium [CVE-2026-62915] Microsoft Exchange Server Security Feature Bypass Vulnerability

This medium-severity Microsoft Server advisory covers CVE-2026-62915 affecting Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15.

CVE-2026-62915 Published Aug 11, 2026Updated by vendor Aug 11, 2026
Affected products & platforms
Microsoft ServerExchange Server
Open vendor advisory

Android app · Google Play

Monitor future Microsoft Server CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Summary

Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.

Affected products named by the advisory: Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Exchange Server 2019 Cumulative Update 15; Microsoft Exchange Server Subscription Edition RTM.

Affected versions
  • Microsoft Exchange Server 2016 Cumulative Update 23 15.01.0.0 before 15.01.2507.072
  • Microsoft Exchange Server 2019 Cumulative Update 14 15.02.0.0 before 15.02.1544.044
  • Microsoft Exchange Server 2019 Cumulative Update 15 15.02.0.0 before 15.02.1748.049
  • Microsoft Exchange Server Subscription Edition RTM 15.02.0.0 before 15.02.2562.046

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

Fixed versions
  • 15.01.2507.072
  • 15.02.1544.044
  • 15.02.1748.049
  • 15.02.2562.046

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

Mitigation

Upgrade to a fixed release: 15.01.2507.072, 15.02.1544.044, 15.02.1748.049, 15.02.2562.046. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 1 hour ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.