Vulnerabilities4 min read
Microsoft Finally Patches Exchange OWA Zero-Day After 26-Day Wait
Microsoft releases CVE-2026-42897 fix for Exchange Server OWA XSS vulnerability exploited since May. ESU-only updates for 2016/2019 leave many systems exposed.
Marcus ChenJun 12, 2026