CVE-2026-65813

Microsoft Exchange Server Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

We have discovered 7,236 live websites that are affected by CVE-2026-65813.

Run a Free Instant Scan



Affected Software

Product  Microsoft Exchange Server
Category Web Mail
Vulnerable Domains7,236 live websites (57% of Microsoft Exchange Server install base)
Vulnerable Versions
  • from 15.1 through 15.1.2507.72
  • from 15.2 through 15.2.1544.44
  • from 15.2 through 15.2.1748.49
  • from 15.2 through 15.2.2562.46
Vulnerable Versions Count103 versions ( 77% of all versions)


Common Weakness Enumeration

CWE-918 Server-Side Request Forgery (SSRF)



Details

  • Published - Aug 11, 2026
  • Updated - Aug 27, 2026

Website Distribution by Country

Number of websites using CVE-2026-65813
United States1,868 websites


Germany640 websites
Russia339 websites
France268 websites
GB242 websites
Canada235 websites
Czech Republic173 websites
Italy171 websites
Netherlands159 websites
Austria155 websites

Website Distribution by TLD

Number of websites using CVE-2026-65813
.com1,873 websites
.org562 websites
.de510 websites
.ru293 websites
.net281 websites
.fr167 websites
.edu160 websites
.cz155 websites
.it139 websites
.nl116 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-65813

Top websites that are affected by CVE-2026-65813. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**.de Germany**,***
**.****.***.net France**,***
***.***.tw Taiwan**,***
***************.fr France***,***
***********.***.ar Argentina***,***
*****************.com France***,***
*******.***.tw Taiwan***,***
****.**********.***.vn Vietnam***,***
***.ms Montserrat***,***
*******.******.se Sweden***,***
See full domain list

FAQ

CVE-2026-65813 is Server-Side Request Forgery (SSRF) in Microsoft Exchange Server
A total of 7,236 websites have been identified as vulnerable to CVE-2026-65813, based on global website indexing conducted by WebTechSurvey.
The Microsoft Exchange Server is affected by the CVE-2026-65813 vulnerability.
Microsoft Exchange Server versions up to 15.2.2562.46 are vulnerable to CVE-2026-65813.
CVE-2026-65813 is resolved in version 15.2.2562.46 of Microsoft Exchange Server.