CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability

T1Covered by 1 source · first reported by Microsoft MSRC at 02 Oct, 14:00 UTC

Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.

security

Sources

• T1CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft MSRC02 Oct, 14:00

Vulnerabilities

• CVE-2026-96940