Microsoft Releases Out-of-Band Security Update for High-Severity Exchange Server Vulnerability CVE-2026-96940

Microsoft released out-of-band security updates to address a high-severity vulnerability in Microsoft Exchange Server tracked as CVE-2026-96940 with a CVSS score of 8.8. The flaw involves weak authorization that allows an authenticated attacker to escalate privileges under certain conditions. The vulnerability enables authenticated attackers to elevate privileges over a network according to the security notice.