Wire · opportunities
21000 Exchange Servers Exposed to Public PoC Exploit After Pwn2Own $200K Chain Demo
◆ Sectors
Cybersecurity
◆ Geography
United States
◆ Source
◆ Verified
Fusion42 · 1 September 2026 · Fusion42 review
A critical authentication bypass vulnerability (CVE-2026-62911) in Microsoft Exchange Server with SYSTEM-level remote code execution has been publicly exploited, exposing approximately 21,000 unpatched, internet-facing servers worldwide, including thousands in the US, Germany, and the UK.
This Wire brief sits within Fusion42's coverage of Cybersecurity.
◆ ◆ The Wire takeaway
This exploit chain turns unpatched Exchange servers into live attack vectors overnight. You need to verify your Exchange patch status immediately or risk your infrastructure becoming an entry point for attackers.
◆ Coverage
1 source · 1 Sep 2026
◆ Related on Wire
◆ Topics
Cybersecurityrceexchange-servercybersecuritypublic-exploitvulnerabilitymicrosoft