⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2022-41082 (ProxyNotShell): Exchange Server Vulnerability Used in StrikeShark

June 26, 2026

CVE-2022-41082 is a remote code execution vulnerability in Microsoft Exchange Server, part of the ProxyNotShell attack chain. It was exploited in StrikeShark.

Discovered from: StrikeShark Campaign Uses Novel SharkLoader Malware to Deploy Cobalt Strike Beacon