Microsoft Exchange SSRF Vulnerability Details Released Along With Public PoC Exploit

Security researchers from HawkTrace have disclosed technical details of a high-severity server-side request forgery (SSRF) vulnerability in Microsoft Exchange, tracked as CVE-2026-45504. The flaw, which carries a CVSS score of 8.8, allows authenticated, low-privileged users to read arbitrary files from vulnerable Exchange servers, raising serious concerns for enterprises relying on on-premises deployments. Microsoft Exchange is [...] The post Microsoft Exchange SSRF Vulnerability Details Release