---
id: 6156
title: "CVE-2026-45502 — Microsoft Exchange Server EWS InstallApp Server-Side Request Forgery"
cve: CVE-2026-45502
source_domain: aretiq.ai
source_url: "https://aretiq.ai/research/vul260622-cve-2026-45502-microsoft-exchange-server-ews-installapp-server-side-request-forgery/"
published_at: "2026-06-22T00:00:00Z"
tags: ["cloud", "ssrf", "exchange-server", "cve-2026-45502", "ews", "on-premises"]
phying_url: "https://phying.com/item/6156"
lang: en
---

# CVE-2026-45502 — Microsoft Exchange Server EWS InstallApp Server-Side Request Forgery

## Summary

CVE-2026-45502: Exchange EWS InstallApp SSRF—the intranet address check is gated on isBposUser, false in all on-prem deployments, letting authenticated users reach arbitrary internal URLs.

## Intelligence Metadata

- **Sources:** aretiq.ai
- **CVE:** CVE-2026-45502
- **Published:** 2026-06-22T00:00:00Z
- **Original:** https://aretiq.ai/research/vul260622-cve-2026-45502-microsoft-exchange-server-ews-installapp-server-side-request-forgery/
- **Phying News:** https://phying.com/item/6156