CVE-2026-96940Vulnerability
Reported by 9 independent sources · first reported by CERT-FR · last reported
Last reported 11 days ago
higher than 40% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
12 reports, newest first · the exact sentence from each-
Microsoft Patch Tuesday, October 2026 Security Update Review“…776, CVE-2026-96844, CVE-2026-83760, CVE-2026-88158, CVE-2026-87692, CVE-2026-77910, CVE-2026-87696, CVE-2026-70571, CVE-2026-70279, CVE-2026-96940, CVE-2026-87695, CVE-2026-88196, CVE-2026-88197, CVE-2026-105596, CVE-2026-105595, CVE-2026-102849, CVE-2026-102850, CVE-2026-105716…”
-
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities“CVE-2026-96940: Microsoft Exchange Server Elevation of Privilege Vulnerability”
-
October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)“CVE-2026-96940”
-
NCSC-2026-0419 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Excange Server“Van de kwetsbaarheid met kenmerk CVE-2026-96940 is eerder al een out-of-band update verschenen, maar is ook opgenomen in deze cumulatieve update.”
-
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More“…ndles for WooCommerce WordPress plugin), CVE-2026-94504 (Ninja Forms WordPress plugin), CVE-2026-105133, CVE-2026-105134 (AhsayCBS), CVE-2026-96940 (Microsoft Exchange Server), CVE-2026-63277 (LibreOffice), CVE-2026-59265 (Apache OpenOffice), and multiple vulnerabilities in WordP…”
-
Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION“CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely”
-
Week in review: FortiBleed is still active, Patch Tuesday forecast“Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)”
-
CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely“CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely”
-
Microsoft security advisory (AV26-1001)“Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2026-96940”
-
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes“The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.”
-
Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)“Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)”
-
Vulnérabilité dans Microsoft Exchange Server (05 octobre 2026)“Bulletin de sécurité Microsoft CVE-2026-96940 du 02 octobre 2026”
Indicators reported together
named in the same reports- snort[.]orgin 1 report
- fbijobs[.]govin 1 report
- hunt[.]ioin 1 report
Copy these 3 indicators · defanged
Also named with it: CVE-2026-21589, CVE-2026-86360, CVE-2026-102255, CVE-2026-47483, CVE-2026-102489, CVE-2026-102490, CVE-2026-88779, CVE-2026-59265, CVE-2026-63277, CVE-2026-86361, CVE-2026-86362, CVE-2026-91140, CVE-2026-106197, CVE-2026-106358, CVE-2026-106382, CVE-2026-106347, CVE-2026-102404
Thanks — we review every report.