The first example I looked at was haute-sorne.ch, which is reported by this tool as "Self hosted/other". Whilst it's true that they appear to self host, https://mails.haute-sorne.ch will land you on a Microsoft Exchange server, patch level 15.2.1748.39.
This is better than typical, being an October 2025 patch. But that leaves open CVE-2025-64667, CVE-2025-64666 and CVE-2026-21527. Which are vulnerabilities with patches out going back months.
Now are these RCEs? No, but this was also the first example I looked at.
Like Aeugst am Albis reports self-hosted, with: "MS365 tenant detected: Managed". But what I don't see, is other cloud office solution providers. Like, it's either hyperscalers or "self hosted". Why no cloud, sovereign even, alternatives?
Edit: there are (Infomaniak...), it was just Firefox json search who failed me :)
MX in Swiss/Europe does not mean it is not Google or Microsoft. Just checked out the French equivalent linked above, it says things like "MX for outlook.com in European Union [green checkbox]"
Be careful, the self-hosted may just be an out-of-date Exchange On-Premises.
The first example I looked at was haute-sorne.ch, which is reported by this tool as "Self hosted/other". Whilst it's true that they appear to self host, https://mails.haute-sorne.ch will land you on a Microsoft Exchange server, patch level 15.2.1748.39.
This is better than typical, being an October 2025 patch. But that leaves open CVE-2025-64667, CVE-2025-64666 and CVE-2026-21527. Which are vulnerabilities with patches out going back months.
Now are these RCEs? No, but this was also the first example I looked at.
Like Aeugst am Albis reports self-hosted, with: "MS365 tenant detected: Managed". But what I don't see, is other cloud office solution providers. Like, it's either hyperscalers or "self hosted". Why no cloud, sovereign even, alternatives?
Edit: there are (Infomaniak...), it was just Firefox json search who failed me :)
MX in Swiss/Europe does not mean it is not Google or Microsoft. Just checked out the French equivalent linked above, it says things like "MX for outlook.com in European Union [green checkbox]"