CVE-2021-26857

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Aug 19, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2021
Last modified
Aug 19, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-268587.8Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-268597.7Microsoft Power BI Information Disclosure VulnerabilityCVE-2021-268607.8Windows App-V Overlay Filter Elevation of Privilege VulnerabilityCVE-2021-268617.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-268627.0Windows Installer Elevation of Privilege VulnerabilityCVE-2021-268637.0Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-268648.4Windows Virtual Registry Provider Elevation of Privilege VulnerabilityCVE-2021-268658.8Windows Container Execution Agent Elevation of Privilege VulnerabilityCVE-2021-268667.1Windows Update Service Elevation of Privilege VulnerabilityCVE-2021-268679.9Windows Hyper-V Remote Code Execution VulnerabilityCVE-2021-268687.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2021-268695.5Windows ActiveX Installer Service Information Disclosure Vulnerability
CVE-2021-26857: High severity, CVSS 7.8 | Vulnix