Is CVE-2026-42897 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-42897 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-42897 — Security Advisory

A backdoor called OWAReaper is keeping mailbox access alive on on-premises Exchange servers long after CVE-2026-42897 was fixed and federally flagged.

2026

What WebPulse reported · 1 analysis

Microsoft Patched This Exchange Flaw in May. Attackers Were Still Inside in July.

A backdoor called OWAReaper is keeping mailbox access alive on on-premises Exchange servers long after CVE-2026-42897 was fixed and federally flagged.

July 30, 2026

View CVE-2026-42897 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-60137 CVE-2026-63030 CVE-2026-50549 CVE-2026-50548 CVE-2026-9082 CVE-2026-49160 CVE-2026-48019 CVE-2026-39861