CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

Exchange Server Stored Cross-Site Scripting Vulnerability

July 14, 2026

CVE-2026-55008 is a stored cross-site scripting vulnerability in Outlook Web Access (OWA) with a CVSS score of 9.6. It is filed under spoofing by Microsoft but is a significant risk.