AI Summary

CISA has added the CVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting Vulnerability to its Known Exploited Vulnerabilities Catalog due to evidence of active exploitation. This vulnerability poses significant risks to the federal enterprise and is a frequent attack vector for malicious cyber actors. The addition is in line with Binding Operational Directive 22-01, which requires federal agencies to remediate identified vulnerabilities.

AI summaries can be wrong sometimes—always verify important details using the source article.