---
title: "Discussion on \"New Zero-Day on Microsoft Exchange: Just one email can steal an entire OWA login session.\" | Hashnode"
description: "Discussion on \"New Zero-Day on Microsoft Exchange: Just one email can steal an entire OWA login session.\". Risk summary\nRecently, a particularly severe vulnerability was discovered, causing significant concern within the security community. Just a single carefully crafted email is enough to execute malicio"
url: "https://hashnode.com/posts/new-zero-day-on-microsoft-exchange-just-one-email-can-steal-an-entire-owa-login-session/6a0eca208b034602211a8da5"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [New Zero-Day on Microsoft Exchange: Just one email can steal an entire OWA login session.](https://blog.fiscybersec.com/new-zero-day-on-microsoft-exchange-just-one-email-can-steal-an-entire-owa-login-session?utm_source=hashnode&utm_medium=feed)

Risk summary Recently, a particularly severe vulnerability was discovered, causing significant concern within the security community. Just a single carefully crafted email is enough to execute malicio

May 21 · 9 min read · blog.fiscybersec.com  
Read the article

-   [#zero-day](https://hashnode.com/tag/zero-day)
-   [#cve-2026-42897](https://hashnode.com/tag/cve-2026-42897)
-   [#microsoft-exchange-on-prem](https://hashnode.com/tag/microsoft-exchange-on-prem)
-   [#cross-site-scripting](https://hashnode.com/tag/cross-site-scripting)
-   [#eems](https://hashnode.com/tag/eems)
-   [#javascript-payload](https://hashnode.com/tag/javascript-payload)
-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)

## Written by

[Lưu Tuấn Anh](https://hashnode.com/@anhlt120)

@anhlt120

  
[View profile](https://hashnode.com/@anhlt120)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.