CVE-2026-48579
Critical · 9.1CVSS
9.1
EPSS
1.0%
Published
Jun 4, 2026
CISA due date
—
The record
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62989 Shopper is a Headless e-commerce Admin Panel. CWE-285
- CVE-2026-119330 Immich is a high-performance self-hosted photo and video management solution. CWE-285
- CVE-2026-55551 ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case… CWE-285
- CVE-2026-112905 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or… CWE-285
- CVE-2026-104316 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any… CWE-285
- CVE-2026-113696 Improper authorization in the SmartIT change approval feature of BMC IT Service… CWE-285
- CVE-2026-113694 Improper authorization in the SmartIT user attachment feature of BMC IT Service… CWE-285
- CVE-2026-42949 A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA… CWE-285