External Control of File Name or Path in Microsoft Exchange Server Subscription Edition RTM - CVE-2026-118151
Published: November 11, 2026
Vulnerability identifier: #VU165049
CSH Severity: Low
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-118151
CWE-ID: CWE-73
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote privileged user to escalate privileges to SYSTEM.
The vulnerability exists due to external control of file names or paths in Microsoft Exchange Server when handling externally supplied file names or paths. A remote privileged user can manipulate a file name or path used by the server to gain SYSTEM privileges.
Affected software
Microsoft Exchange Server Subscription Edition RTM
How to mitigate CVE-2026-118151
Install security update from vendor's website.
Microsoft Exchange Server Subscription Edition RTM - update to 15.02.2562.057