Internet Watch

Microsoft is tracking CVE-2026-73570, a vulnerability allowing unauthenticated command injection on internet-facing mail servers. Because the flaw can be exploited without credentials, any exposed mail server is a potential target, making it a priority for administrators to patch or mitigate quickly. Security teams are monitoring for exploitation activity and vendor updates.