Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

T2Covered by 1 source · first reported by The Hacker News at 05 Oct, 16:21 UTC

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system. "Weak authorization…