CVE-2026-48582 Microsoft Exchange Online Elevation of Privilege Vulnerability Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. EPSS 0.01 CVE-2026-48582 Microsoft US Microsoft Security · 18. 6. 16:00