> TritonInfoSec News
Home / Oct 06, 2026 / Story
0
#4 The Hacker News general October 05, 2026 at 16:21 UTC

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

By [email protected] (The Hacker News)

AI Summary

Microsoft issued an out-of-band patch for CVE-2026-96940 (CVSS 8.8), a high-severity weak authorization flaw in Microsoft Exchange Server that allows authenticated attackers to read other users' mailboxes by escalating privileges. The out-of-band release indicates Microsoft assessed the risk as urgent enough not to wait for the next Patch Tuesday cycle. Exchange administrators should prioritize applying this update, particularly in environments where insider threat or compromised account scenarios are a concern.

Read full article → https://thehackernews.com/2026/10/microsoft-exchan…

Relevance score: 83.0/100

# More from October 06

  1. 1
    Citrix discloses third actively exploited NetScaler zero-day in less than a week CyberScoop
  2. 2
    New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline The Hacker News
  3. 3
    Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE The Hacker News
  4. 5
    Denmark population registry data breach affects 8.8 million people BleepingComputer
  5. 6
    Alleged ShinyHunters Leader Arrested in Jordan SecurityWeek
  6. 7
    Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2 The Hacker News
  7. 8
    Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity SecurityWeek
  8. 9
    Belarusian hacktivists spent two years inside Russian healthcare network, researchers say The Record
  9. 10
    Alleged dev of Ploutus ATM malware appears in US court after arrest BleepingComputer