Viewing a read-only demo (sample multi-vendor stack · Oct 2026). Want alerts for your own servers?

Configure my stack (Free Beta)
ChangeSignalDemo workspace

← back to the demo dashboard

UPDATEMicrosoft Exchange Server

KB5128895

Apply Microsoft security update KB5128895.

6 CVEs · 6 confirmed · 6 findings filed under this action, at any date

Sources
  • Microsoft Security Response Center (Security Update Guide) vendor6 records, each linked below
Affected
  • Microsoft Exchange Server Subscription Edition RTM

CVEs and records 6

Severity is the source’s own; CVSS only where the record states it. Open a record for its evidence.

  • CVE-2026-70571Microsoft Exchange Server Remote Code Execution VulnerabilitySeverity criticalCVSS 8.1Published 2026-10-14↗
    Microsoft Exchange Server Remote Code Execution Vulnerability version confirmed affected

    Microsoft lists affected product "Microsoft Exchange Server Subscription Edition RTM". Your pinned version 15.02.2562.049 is within the affected range (fixed in build 15.02.2562.056). Critical severity and your pinned version is confirmed affected.

    Record
    2026-Oct:CVE-2026-70571:16792
    CVE
    CVE-2026-70571
    Published
    2026-10-14
    Severity
    critical · CVSS 8.1 (microsoft)
    Versions
    fixed in build 15.02.2562.056
    Reported against
    Microsoft Exchange Server Subscription Edition RTM
    Your version
    15.02.2562.049

    Our recommended action, from the source’s facts: Apply Microsoft security update KB5128895.

  • CVE-2026-70279Microsoft Exchange Server Spoofing VulnerabilitySeverity highCVSS 9.3Published 2026-10-14↗
    Microsoft Exchange Server Spoofing Vulnerability version confirmed affected

    Microsoft lists affected product "Microsoft Exchange Server Subscription Edition RTM". Your pinned version 15.02.2562.049 is within the affected range (fixed in build 15.02.2562.056). High severity and your pinned version is confirmed affected.

    Record
    2026-Oct:CVE-2026-70279:16792
    CVE
    CVE-2026-70279
    Published
    2026-10-14
    Severity
    high · CVSS 9.3 (microsoft)
    Versions
    fixed in build 15.02.2562.056
    Reported against
    Microsoft Exchange Server Subscription Edition RTM
    Your version
    15.02.2562.049

    Our recommended action, from the source’s facts: Apply Microsoft security update KB5128895.

  • CVE-2026-77910Microsoft Exchange Server Elevation of Privilege VulnerabilitySeverity highCVSS 8.8Published 2026-10-14↗
    Microsoft Exchange Server Elevation of Privilege Vulnerability version confirmed affected

    Microsoft lists affected product "Microsoft Exchange Server Subscription Edition RTM". Your pinned version 15.02.2562.049 is within the affected range (fixed in build 15.02.2562.056). High severity and your pinned version is confirmed affected.

    Record
    2026-Oct:CVE-2026-77910:16792
    CVE
    CVE-2026-77910
    Published
    2026-10-14
    Severity
    high · CVSS 8.8 (microsoft)
    Versions
    fixed in build 15.02.2562.056
    Reported against
    Microsoft Exchange Server Subscription Edition RTM
    Your version
    15.02.2562.049

    Our recommended action, from the source’s facts: Apply Microsoft security update KB5128895.

  • CVE-2026-87692Microsoft Exchange Server Elevation of Privilege VulnerabilitySeverity highCVSS 7.8Published 2026-10-14↗
    Microsoft Exchange Server Elevation of Privilege Vulnerability version confirmed affected

    Microsoft lists affected product "Microsoft Exchange Server Subscription Edition RTM". Your pinned version 15.02.2562.049 is within the affected range (fixed in build 15.02.2562.056). High severity and your pinned version is confirmed affected.

    Record
    2026-Oct:CVE-2026-87692:16792
    CVE
    CVE-2026-87692
    Published
    2026-10-14
    Severity
    high · CVSS 7.8 (microsoft)
    Versions
    fixed in build 15.02.2562.056
    Reported against
    Microsoft Exchange Server Subscription Edition RTM
    Your version
    15.02.2562.049

    Our recommended action, from the source’s facts: Apply Microsoft security update KB5128895.

  • CVE-2026-87695Microsoft Exchange Server Elevation of Privilege VulnerabilitySeverity highCVSS 7.8Published 2026-10-14↗
    Microsoft Exchange Server Elevation of Privilege Vulnerability version confirmed affected

    Microsoft lists affected product "Microsoft Exchange Server Subscription Edition RTM". Your pinned version 15.02.2562.049 is within the affected range (fixed in build 15.02.2562.056). High severity and your pinned version is confirmed affected.

    Record
    2026-Oct:CVE-2026-87695:16792
    CVE
    CVE-2026-87695
    Published
    2026-10-14
    Severity
    high · CVSS 7.8 (microsoft)
    Versions
    fixed in build 15.02.2562.056
    Reported against
    Microsoft Exchange Server Subscription Edition RTM
    Your version
    15.02.2562.049

    Our recommended action, from the source’s facts: Apply Microsoft security update KB5128895.

  • CVE-2026-87696Microsoft Exchange Server Elevation of Privilege VulnerabilitySeverity highCVSS 7.5Published 2026-10-14↗
    Microsoft Exchange Server Elevation of Privilege Vulnerability version confirmed affected

    Microsoft lists affected product "Microsoft Exchange Server Subscription Edition RTM". Your pinned version 15.02.2562.049 is within the affected range (fixed in build 15.02.2562.056). High severity and your pinned version is confirmed affected.

    Record
    2026-Oct:CVE-2026-87696:16792
    CVE
    CVE-2026-87696
    Published
    2026-10-14
    Severity
    high · CVSS 7.5 (microsoft)
    Versions
    fixed in build 15.02.2562.056
    Reported against
    Microsoft Exchange Server Subscription Edition RTM
    Your version
    15.02.2562.049

    Our recommended action, from the source’s facts: Apply Microsoft security update KB5128895.

Demo — ChangeSignal