HighVulnerabilityNov 10, 2026

CISA adds Microsoft Outlook spoofing flaw to KEV

CISA added CVE-2026-124194, a missing user interaction vulnerability in Microsoft Office Outlook, to the KEV catalog. The flaw allows unauthorized attackers to perform spoofing attacks over a network. Federal agencies must patch by November 24, 2026 per BOD 26-04 guidance.

Vulnerabilities

CVE-2026-124194 CVSS 6.5 Exploited (CISA KEV)

Source

CISA KEVRead the original article

AI-written summary. Check the original reporting before acting.