Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft has released an out-of-band security update addressing a high-severity privilege escalation vulnerability in Microsoft Exchange Server. Tracked as CVE-2026-96940 with a CVSS score of 8.8, the weak authorization flaw allows authenticated attackers to read other users’ mailboxes under specific conditions. Administrators should apply the patches immediately to mitigate potential exploitation.