CVE-2026-65813

This is a Microsoft Exchange Server flaw that lets someone who already has a valid account use crafted requests to trick the server into reaching places it normally shouldn’t. That can help them break out of their current permissions and gain much higher access. Think of it like having an employee badge, then using a trick to bypass internal locks and reach the building’s “manager-only” areas.

This matters if your business runs Microsoft Exchange Server on any of the listed affected releases (2016 CU23; 2019 CU14 or CU15; or Subscription Edition RTM). The key requirement is that the attacker already has valid credentials—this is not a “random outsider with no access” scenario. Treat it as a risk when the attacker can reach Exchange in your environment and has an account that can issue the needed requests.

The verdict is RED because the flaw allows an authorized attacker to escalate privileges over a network by forcing Exchange to make unauthorized internal requests. Even though confirmed “in the wild” details aren’t clearly dated in the reporting you provided, the patch-focused activity (including attention tied to a major threat actor) makes timely remediation important.