⚡ Exploit-DB.ai HIGH
HIGH

CVE-2020-0688

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

Exchange Server RCE via static validation key — once you know the key (same for all installs of a given version), any authenticated user can execute arbitrary code. Apply February 2020 patches and rotate Exchange validation keys.

📋 Official Description

A remote code execution vulnerability exists in Microsoft Exchange Server when the server fails to properly create unique keys at install time.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →