Vulnerability in Microsoft Exchange Server (October 5, 2026)

CERT-FR Notice Subject: Vulnerability in Microsoft Exchange Server Document Management Detailed version management is found at the end of this document. Risk - Privilege escalation Affected Systems - Microsoft Exchange Server 2016 Cumulative Update versions prior to 15.01.2507.075 - Microsoft Exchange Server 2019 Cumulative Update versions prior to 15.02.1544.048 - Microsoft Exchange Server 2019 Cumulative Update versions prior to 15.02.1748.053 - Microsoft Exchange Server Subscription Edition RTM versions prior to 15.02.2562.053 Summary A vulnerability has been discovered in Microsoft Exchange Server. It allows an attacker to cause a privilege escalation. Solutions Refer to the vendor's security bulletin for obtaining patches (see Documentation section). Documentation - Microsoft Security Bulletin CVE-2026-96940 of October 2, 2026 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940 - CVE Reference CVE-2026-96940 https://www.cve.org/CVERecord?id=CVE-2026-96940