CVE-2021-26858

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Oct 1, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2021
Last modified
Oct 1, 2026
Added to CISA KEV
Nov 3, 2021
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-268597.7Microsoft Power BI Information Disclosure VulnerabilityCVE-2021-268607.8Windows App-V Overlay Filter Elevation of Privilege VulnerabilityCVE-2021-268617.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-268627.0Windows Installer Elevation of Privilege VulnerabilityCVE-2021-268637.0Windows Win32k Elevation of Privilege VulnerabilityCVE-2021-268648.4Windows Virtual Registry Provider Elevation of Privilege VulnerabilityCVE-2021-268658.8Windows Container Execution Agent Elevation of Privilege VulnerabilityCVE-2021-268667.1Windows Update Service Elevation of Privilege VulnerabilityCVE-2021-268679.9Windows Hyper-V Remote Code Execution VulnerabilityCVE-2021-268687.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2021-268695.5Windows ActiveX Installer Service Information Disclosure VulnerabilityCVE-2021-268707.8Windows Projected File System Elevation of Privilege Vulnerability
CVE-2021-26858: High severity, CVSS 7.8 | Vulnix