Vulnerability in Microsoft Exchange Server 2016 Cumulative Update 23

[ Description ]Official description

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

[ Fixes ]Fixes and patches

• Security bulletin: Microsoft CVE-2026-96940Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940, cited by CERT-FR CERTFR-2026-AVI-1258

[ Advisories ]Government CERT advisories

• NCSC-NL13 Oct 2026NCSC-2026-0419

  Vulnerabilities fixed in Microsoft Excange Server Translated from Dutch

  Probability/damage M/HCVE-2026-70279CVE-2026-70571CVE-2026-77910+4 more CVEs
• NCSC-NL6 Oct 2026NCSC-2026-0401

  Vulnerability fixed in Microsoft Exchange Server Translated from Dutch

  Probability/damage M/HCVE-2026-96940
• CERT-FR5 Oct 2026CERTFR-2026-AVI-1258

  Vulnerability in Microsoft Exchange Server Translated from French

  A vulnerability has been discovered in Microsoft Exchange Server. It allows an attacker to cause privilege escalation.

  CVE-2026-96940
• BSI CERT-Bund4 Oct 2026WID-SEC-2026-3718

  Microsoft Exchange Server: Vulnerability allows privilege escalation Translated from German

  CVE-2026-96940

[ References ]References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940PatchVendor Advisory