First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-26198

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 14	>= 15.02.0, < 15.02.1258.034
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 13	>= 15.02.0, < 15.02.1544.011
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 23	>= 15.01.0, < 15.01.2507.039

References

Timeline

Published: Mar 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-261997.8Microsoft Office Elevation of Privilege Vulnerability CVE-2024-26209.8A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affe CVE-2024-262008.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-262016.6Microsoft Intune Linux Agent Elevation of Privilege Vulnerability CVE-2024-262027.2DHCP Server Service Remote Code Execution Vulnerability CVE-2024-262037.3Azure Data Studio Elevation of Privilege Vulnerability CVE-2024-262047.5Outlook for Android Information Disclosure Vulnerability CVE-2024-262058.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-262075.5Windows Remote Access Connection Manager Information Disclosure Vulnerability CVE-2024-262087.2Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability CVE-2024-262095.5Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability CVE-2024-26219.8A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected

CVE-2024-26198: High severity, CVSS 8.8 | Vulnix