Microsoft Releases Out-of-Band Security Update for Exchange Server to Fix High-Severity Mailbox Access Bug (CVE-2026-96940)

Microsoft has issued an urgent security update for Exchange Server, addressing CVE-2026-96940, a high-severity vulnerability that could allow authenticated attackers to read other users' emails and attachments within the same organization. Although no active exploitation is reported, Microsoft advises immediate patching due to the flaw's potential for consistent exploitation.