H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2026-04-13
Last seen2026-04-13

Confidence

—

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productMicrosoft Exchange Server
Added2026-04-13
Due date2026-04-27
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2023-21529
open
cwe
CWE-502
open