Impacted if
Not known yet — the vendor's record and the NVD are being read.
First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Coverage
-
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
The Hacker News
Cybersecurity
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as CVE-2026-96940, is…