---
id: 10127
title: "[CVE-2021-26855] Operation Exchange Marauder: Active Exploitation of Multiple Zero-Day Microsoft Exchange Vulnerabilities"
cve: CVE-2021-26855
source_domain: volexity.com
source_url: "https://www.volexity.com/blog/2021/03/02/active-exploitation-of-microsoft-exchange-zero-day-vulnerabilities/"
published_at: "2021-03-02T16:07:53Z"
tags: ["zero-day", "vulnerability-research", "threat-intelligence", "apt", "exploit", "microsoft-exchange"]
phying_url: "https://phying.com/item/10127"
lang: en
---

# [CVE-2021-26855] Operation Exchange Marauder: Active Exploitation of Multiple Zero-Day Microsoft Exchange Vulnerabilities

## Summary

[UPDATE] March 8, 2021 – Since original publication of this blog, Volexity has now observed that cyber espionage operations using the SSRF vulnerability CVE-2021-26855 started occurring on January 3, 2021, three […]

## Intelligence Metadata

- **Sources:** volexity.com
- **CVE:** CVE-2021-26855
- **Published:** 2021-03-02T16:07:53Z
- **Original:** https://www.volexity.com/blog/2021/03/02/active-exploitation-of-microsoft-exchange-zero-day-vulnerabilities/
- **Phying News:** https://phying.com/item/10127