Exchange Server CVE‑2026‑45504 lets low‑privileged users read any local file
A newly disclosed CVE‑2026‑45504 lets an authenticated low‑privilege Exchange user pull arbitrary files from the server by abusing EWS ReferenceAttachment URLs. The flaw bypasses typical permissions, exposing system files like hosts or secrets, and could aid post‑compromise lateral movement. Administrators must patch or block the EWS endpoint immediately.