{"id":"CVE-2026-118151","kind":"vulnerability","aliases":["CVE-2026-118151"],"related":[],"title":"Microsoft Exchange Server: file path control lets an authorized user gain privileges","description":"External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.","summary":"Microsoft Exchange Server has an external control of file name or path flaw. An attacker who already holds an authorized account can elevate privileges over the network.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["exchange-server","microsoft","on-premises","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:36+00:00","first_seen_at":"2026-11-10T19:24:49+00:00","triaged_at":"2026-11-10T19:47:49+00:00","updated_at":"2026-11-10T19:47:49+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T19:47:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft Exchange Server: file path control lets an authorized user gain privileges","impact":"high","summary":"Microsoft Exchange Server has an external control of file name or path flaw. An attacker who already holds an authorized account can elevate privileges over the network.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["exchange-server","microsoft","on-premises"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"authorized attacker gains elevated privileges on the Exchange server","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-118151 for affected builds and the fixed cumulative update.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Microsoft Exchange Server on-premises. The sources do not list affected versions or configuration details, so the exact exposure is unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000647,"input_tokens":4487,"output_tokens":396,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-118151 for affected builds and the fixed cumulative update.","search":"'-118151':15A,18A '-2026':14A,17A 'account':47B 'allow':65C 'alreadi':43B 'attack':41B,68C 'author':9A,46B,67C 'control':6A,33B,55C 'cve':13A,16A 'elev':49B,70C 'exchang':2A,20B,28B,63C 'exchange-serv':19B 'extern':32B,54C 'file':4A,35B,57C 'flaw':39B 'gain':11A 'hold':44B 'let':7A 'microsoft':1A,22B,27B,62C 'name':36B,58C 'network':53B,74C 'on-premis':23B 'path':5A,38B,60C 'premis':25B 'privileg':12A,50B,71C 'server':3A,21B,29B,64C 'user':10A 'vendor':26B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Microsoft Exchange Server on-premises. The sources do not list affected versions or configuration details, so the exact exposure is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["exchangeserver","high","microsoft","onpremises","vendor"],"campaign_type":null,"search_a":"'-118151':15A,18A '-2026':14A,17A 'author':9A 'control':6A 'cve':13A,16A 'exchang':2A 'file':4A 'gain':11A 'let':7A 'microsoft':1A 'path':5A 'privileg':12A 'server':3A 'user':10A","search_b":"'account':47B 'alreadi':43B 'attack':41B 'author':46B 'control':33B 'elev':49B 'exchang':20B,28B 'exchange-serv':19B 'extern':32B 'file':35B 'flaw':39B 'hold':44B 'microsoft':22B,27B 'name':36B 'network':53B 'on-premis':23B 'path':38B 'premis':25B 'privileg':50B 'server':21B,29B 'vendor':26B","search_c":"'allow':65C 'attack':68C 'author':67C 'control':55C 'elev':70C 'exchang':63C 'extern':54C 'file':57C 'microsoft':62C 'name':58C 'network':74C 'path':60C 'privileg':71C 'server':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:36+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118151","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118151","severity":null,"published_at":"2026-11-10T19:19:36+00:00","modified_at":"2026-11-10T19:19:36+00:00","first_seen_at":"2026-11-10T19:24:49+00:00","fetched_at":"2026-11-10T19:24:49+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}