Microsoft Releases Exchange Server Update for Privilege Escalation Flaw

Microsoft has released an out-of-band security update to address CVE-2026-96940, a high-severity elevation-of-privilege vulnerability in on-premises Microsoft Exchange Server. This flaw stems from weak authorization controls that could allow an authenticated user to gain access to other users’ mailboxes within the sam…