---
id: "CVE-2026-118151"
page: "https://infrastack.ai/live/CVE-2026-118151"
kind: "vulnerability"
aliases: ["CVE-2026-118151"]
title: "Microsoft Exchange Server: file path control lets an authorized user gain privileges"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Exchange Server Subscription Edition RTM", "fixed": ["15.02.2562.057"], "affected": ">= 15.02.0.0, < 15.02.2562.057", "ecosystem": "vendor"}]
ecosystems: []
tags: ["exchange-se", "exchange-server", "microsoft", "on-premises", "self-hosted", "vendor"]
not_affected_if: ["exchange-online", "managed-hosting"]
published_at: "2026-11-10T19:19:36+00:00"
first_seen_at: "2026-11-10T19:24:49+00:00"
updated_at: "2026-11-10T23:22:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118151", "first_seen_at": "2026-11-10T19:24:49+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/cve-2026-118151", "first_seen_at": "2026-11-10T23:22:27+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/cve-2026-118151", "https://support.microsoft.com/help/5133453"]}]
exploit_sources: []
---

# Microsoft Exchange Server: file path control lets an authorized user gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-118151 (this .md is for agents)

Microsoft Exchange Server has an external control of file name or path flaw. An attacker who already holds an authorized account can elevate privileges over the network.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Exchange Server Subscription Edition RTM affected >= 15.02.0.0, < 15.02.2562.057 fixed 15.02.2562.057

## How to check

In Exchange Management Shell run: Get-ExchangeServer | Format-List Name,AdminDisplayVersion. Any Exchange Server Subscription Edition RTM server with a build below 15.02.2562.057 is exposed. The Exchange Health Checker script also reports missing security updates. Also check Exchange 2016/2019 servers: the CNA data lists only SE RTM, so they are probably not affected, but the sources do not rule them out.

## Fix

Install Exchange Server SE RTM Security Update SU12 (KB5133453, Nov 10 2026), which takes the build to 15.02.2562.057. It replaces KB5128895.

## Timeline

- 2026-11-10T19:24:49+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118151
- 2026-11-10T23:22:27+00:00 analyst https://nvd.nist.gov/vuln/detail/cve-2026-118151 — Microsoft KB5133453 (SU12) lists CVE-2026-118151 as fixed; affected range from NVD record contributed by Microsoft CNA. MSRC page is JS-only and was not readable, so only fix is marked verified. No exploitation or PoC found (not in KEV, not noted by BleepingComputer). X not checked.

## Documents

- [advisory] NVD CVE-2026-118151 (Microsoft CNA data) https://nvd.nist.gov/vuln/detail/cve-2026-118151
- [fix] KB5133453 Exchange SE RTM SU12 https://support.microsoft.com/help/5133453

## From the sources

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_