Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups

Source: The Hacker News | Added:

Microsoft has disclosed a high-severity security flaw in on-premise versions of Exchange Server that could allow attackers to gain elevated privileges in hybrid deployments. The vulnerability, identified as CVE-2025-53786, has a CVSS score of 8.0 and was reported by Dirk-jan Mollema from Outsider Security.

---

Impact: Microsoft Exchange Server

In the Wild: Unknown

Age: Newly disclosed

Remediation: Not specified

Read Full Original Article →