> CVE-2026-54998 Microsoft Exchange Online Elevation of Privilege Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 02/07/2026 14:00] [LANGUAGE: EN]

Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.