Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation (opens in new tab)

Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation ForbesOn-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email The Hacker NewsExploited Exchange Server flaw turns OWA inboxes into script launchpads The RegisterMicrosoft warns of Exchange zero-day flaw exploited in attacks BleepingComputerMicrosoft Warns of Exchange Server Zero-Day Exploited in the Wild SecurityWeek