Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
Microsoft issues out-of-band security updates for a high-severity Exchange Server flaw that lets authenticated attackers elevate privileges under certain conditions. Tracked as CVE-2026-96940, the vulnerability has a CVSS score of 8.8 and can allow attackers to read other users’ mailboxes.