CVE-2026-48582

CRITICAL NVD

CVSS Score 9.6

Severity CRITICAL

Published Jun 19, 2026

Vendor unknown

Description

Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.