Microsoft Emittit Securitatis Update Ex-Bandam pro Exchange

6 Octobris 2026

Summarium Exsecutivum

Microsoft emisit securitatis update ex-banda pro Exchange Server ad tractandum CVE-2026-96940, vulnerabilitatem Elevationis Privilegii quae sinere potest impugnatorum authenticum aditum ad epistulas et annexa aliorum usorum intra eandem organizationem Exchange. Microsoft dicit se non esse conscium de activa exploitatione vulnerabilitatis. Tamen, societas emisit solutio extra suum normale cyclum update et commendat applicare id quam primum fieri potest.

CVE-2026-96940

CVE-2026-96940 afficit Microsoft Exchange Server et potest sinere impugnatorum authenticum aditum ad data mailbox aliorum usorum.

Expositio potentialis includit:

Epistulas

Annexos epistularum

Communicationes internas

Aliam informationem sensibilem de mailbox

Impunctor iam debet esse authenticatus, et vulnerabilitas non praebet accessum trans-tenant. Microsoft quaestionem internam detexit et ad hanc diem non nuntiavit activam exploitationem.

Microsoft plerumque emittit updates securitatis Exchange ut pars regularis servitii sui. Haec vulnerabilitas recepit solutionem ex-banda, indicans Microsoft remediatio tempestiva satis esse gravis ut non exspectet pro proximo cyclo update regulari.

Servers Exchange manent attrahentes meta quia continent magnam quantitatem informationis organizationalis sensitivae. Vulnerabilitas quae potest transgredi limites accessus normalis mailbox igitur meretur celerem attentionem, etiam sine confirmata exploitatione.

Versio Affected

Update applicatur ad:

Exchange Server Subscription Edition RTM

Exchange Server 2019 CU14

Exchange Server 2019 CU15

Exchange Server 2016 CU23

Microsoft etiam emisit versiones V2 relevantium updates securitatis.

Updates clavis includunt:

KB5129955 — Exchange Server Subscription Edition

KB5129956 — Exchange Server 2019 CU15

KB5129957 — Exchange Server 2019 CU14

Organizationes debent verificare se installaverint novissimum update applicabile potius quam confidere in originali fasciculo.

Consideratio Exchange 2016 et 2019

Exchange Server 2016 et Exchange Server 2019 iam extra sustentationem mainstream sunt. Updates securitatis manent disponibles ad organizationes idoneas per programmatum Microsoft Extended Security Update (ESU). Organizationes adhuc operantes has versiones debent uti hoc tempore ad accelerandum migrationem ad Exchange Server Subscription Edition.

Post-Update Verifications

Microsoft documentavit quaedam problemata quae administratores considerare debent post deployment, inclusa problemata quae ad calendaria publicata et certas hybrid free/busy scaenarum pertinent.

Post installationem update, administratores debent:

Verificare numerum constructionis Exchange.

Currere Exchange Server Health Checker.

Confirmare fluxum epistularum.

Testare Outlook, OWA et ECP accessum.

Validare functionem calendarii.

Reprehendere functionem hybrid free/busy ubi applicabile.

Recensere logs Exchange et actionem authenticationis pro inusitato habitu.

Quod Teams Securitatis Facere Debent

Organizationes in Exchange on-premises debent hoc tractare ut activitatem patching altae prioritatis.

Incipe ab identificando omnes servers Exchange et eorum currentes constructiones. Prioritate systemata externe accessibilia, applicare debet appropriata V2 update securitatis, et validare ambitum post installationem.

Quamquam nunc nulla confirmata exploitatio est, combinatio accessus authenticati, potentialis expositae data mailbox et decisio Microsoft ad emittendum solutionem ex-banda facit hanc vulnerabilitatem dignam celeriter tractandam.

Pro administratores Exchange, hoc non est patch quod in backlog relinquere debet.

Vulnerabilitates Relatae

CVE-2026-88779 CVSS 8.7 HIGH Analyzed

CVE-2026-88779 - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - [Actively Exploited]

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

CVE-2026-96940 CVSS 8.8 HIGH Undergoing Analysis

CVE-2026-96940 - Microsoft Exchange Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive information. To exploit the vulnerability, an attacker could send a specially crafted email message containing a malicious link to a user. Alternatively, an attacker could use a chat client to social engineer a user into clicking the malicious link. The security update addresses the vulnerability by correcting how Microsoft Exchange validates web requests. Note: In order to exploit this vulnerability, a user must click a maliciously crafted link from an attacker.

CVE-2026-90970 CVSS 9.9 CRITICAL Awaiting Analysis

CVE-2026-90970 - Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway.

CVE-2026-104286 CVSS 9.8 CRITICAL Analyzed

CVE-2026-104286 - Fortinet FortiMail Path Traversal Vulnerability - [Actively Exploited]

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

CVE-2026-76504 CVSS 9.8 CRITICAL Analyzed

CVE-2026-76504 - Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability - [Actively Exploited]

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user.

Microsoft Emittit Securitatis Update Ex-Bandam pro Exchange

Vulnerabilitates Relatae

Plura ex TheCyberThrone