Exchange admins need September V2 patches for new privilege flaw

Microsoft’s September V2 Exchange Server updates add a fix for CVE-2026-96940, a network-accessible privilege-escalation flaw that can expose other users’ mailboxes. The update builds on September’s Exchange fixes for remote-code execution and mailbox-takeover risks; on-premises administrators should verify they have the V2 patches installed. Source

Read the full article at the source.