A publicly available proof-of-concept (PoC) repository is drawing attention to a potential pre-authentication remote code execution chain affecting on-premises Microsoft Exchange Server deployments. The repository references CVE-2026-62911, an Exchange authentication-bypass vulnerability disclosed after Pwn2Own Berlin 2026. However, defenders should treat published exploit material as unverified until it has been independently tested in a controlled, isolated […]
The post Public PoC Released for Microsoft Exchange Pre-Auth Remote Code Execution appeared first on Cyber Security News.