Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-45502

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-45502.

Coverage Span: 2026-06-22
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-45502 — Microsoft Exchange Server EWS InstallApp Server-Side Request Forgery

CVE-2026-45502: Exchange EWS InstallApp SSRF—the intranet address check is gated on isBposUser, false in all on-prem deployments, letting authenticated users reach arbitrary internal URLs.