CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely
ID: 513a1835-ccce-504b-a4f8-9b2a449aea87
STIX ID: report--513a1835-ccce-504b-a4f8-9b2a449aea87
Feed Name: Security Affairs
Threat Score
Microsoft issued out-of-band security updates to address CVE-2026-96940, a high-severity (CVSS 8.8) authorization flaw in Exchange Server that can enable an authenticated attacker to escalate privileges and read other users’ mailboxes within the same tenant; on-premises Exchange versions listed in the advisory should be patched immediately while Exchange Online has already been remediated.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.