CVE-2024-49040 is a vulnerability in Exchange Server that allows spoofing emails with a legitimate sender address.Microsoft temporarily suspended the distribution of updates for Exchange Server due to issues with the patch.Attempts to exploit CVE-2024-49040 have been observed, indicating someone is testing the proof of concept.Kaspersky has added a detection method for CVE-2024-49040 to their email security solutions.