Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-05 16:21 UTC
  • Importiert: 2026-10-12 12:12 UTC
  • CVSS: 8.8
  • Quelle-ID: thn_global
  • uid_hash: 619f06a8cd05a36471fbc2e4cea20cc4d3d1852a350459cca4ed583d25a6fdca

Inhalt

Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions.

The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.

"Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-96940

HIGH

8.8

HIGH

8.8

2026-10-02

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews