CVE-2026-69378: Microsoft Exchange Server Denial of Service Vulnerability
Published Sep 8, 2026
·Updated
Microsoft Exchange Server Denial of Service Vulnerability
Other sources
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
— NVD
Affected Software
8 affected componentsFixes available
Microsoft Exchange Server 2019=15
15.02.1748.051
Microsoft Exchange Server 2019=14
15.02.1544.046
Microsoft Exchange Server Subscription Edition RTM<15.02.2562.049
15.02.2562.049
Microsoft Exchange Server 2016=23
15.01.2507.073
Microsoft Exchange Server=2016-cumulative_update_23
Microsoft Exchange Server=2019-cumulative_update_14
Microsoft Exchange Server=2019-cumulative_update_15
Microsoft Exchange Server Subscription Edition<15.02.2562.049
Remediation
Event History
Sep 8, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·05:12 PM
Data Sourced
via MITRE·05:12 PM
DescriptionSeverity
Data Sourced
via NVD·06:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The vector indicates network-based exploitation with low attack complexity. It does not require privileges or user interaction.
2
What security impact is indicated?
The reported impact is limited to availability, with no confidentiality or integrity impact indicated. The scope is unchanged.
3
Which Exchange Server releases are listed as affected?
Microsoft Exchange Server 2016, Microsoft Exchange Server 2019, and Microsoft Exchange Server Subscription Edition RTM are listed.