Nearly 22,000 Microsoft Exchange Servers Remain Vulnerable to Critical Authentication Bypass Flaw (CVE-2026-62911)

Despite a fix released on August 11, 2026, approximately 22,000 Microsoft Exchange servers globally, including thousands in the U.S. and Germany, remain unpatched against CVE-2026-62911. This critical authentication bypass vulnerability allows unauthorized attackers to elevate privileges over a network, with a working exploit now reportedly circulating online.