CVE-2026-54998 Microsoft Exchange Online Elevation of Privilege Vulnerability Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network. EPSS 0.01 CVE-2026-54998 Microsoft US Microsoft Security · 2. 7. 16:00