IOC Passport
CVE-2026-42897
A CVE identifier referenced in published reporting. It is vulnerability context, not a malicious indicator or feed verdict.
This value remains inside its 90-day contextual reporting window. Current reporting status is separate from verified-feed admission. Archive-cleared or archived does not mean clean, inactive, benign, remediated, resolved, or safe, and this lifecycle does not change current verified-feed admission.
Current verified-feed status
Checking live guard…Article reporting and current malicious-feed admission are evaluated separately.
- First reported
- Last reported
- Article count
- 4
- Admission policy
- Context only
- Research lifecycle
- Current
Article reporting history
These dates are report publication dates, not provider sightings or proof of malicious activity.
OWAReaper Shows Why Exchange Mailboxes Need Post-Patch Compromise Review
July CVE Data Shows Why Patch Priority Needs Threat Context
TA488 Turns Outlook Web Access Into a Stealthy Persistence Layer
Exchange OWA Zero-Day Shows Why Email Servers Need Emergency Mitigation
Related indicators
Observables that appear alongside this one in the same reporting. Co-occurrence can suggest shared infrastructure, but it does not establish common ownership, campaign identity, or actor attribution.