LOWVulnerability
Global

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

·Source: The Hacker News

Updated:

Executive Summary

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. "Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a

Analysis

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. "Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a

Indicators of Compromise (1)

CVE (1)
CVE-2026-96940
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Oct 5, 2026.

Related Threats

MEDIUMVulnerability

ANZ completes cross-border tokenised deposit payment with Swift ledger

Australia's ANZ has carried out a live corporate treasury transactions using tokenised deposits and Swift’s blockchain ledger.

Finextra
MEDIUMVulnerability

Anchorage Digital expands global services with Standard Chartered

Digital asset custody services provider Anchorage Digital has formed a partnership with Standard Chartered through which it will offer USD accounts and access to Swift wires, including transfers to and from third parties, to eligible non-US institutional clients.

Finextra
MEDIUMVulnerability

CISA to keep cyber pay incentives, but less staff will qualify

Justin Doubleday reports: The Cybersecurity and Infrastructure Security Agency is continuing to offer cyber pay incentives to retain skilled technical staff, but less employees will qualify for the program under revised criteria that ties eligibility to job series and performance ratings. The revised policy has sparked some concern that CISA could lose more staff after... Source

DataBreaches.net