Black & White Path

Jun 24, 2026 · Information Security

Understanding Microsoft Exchange CVE‑2026‑45504: High‑Risk SSRF Vulnerability

CVE‑2026‑45504, disclosed on Microsoft’s Patch Tuesday (June 9, 2026), is a high‑severity SSRF flaw (CWE‑918) in Exchange Server that lets a low‑privileged authenticated user trigger internal requests, leading to privilege escalation with a CVSS score of 8.8.