ctrlINT What the industry said about every indicator, with the quote

CVE-2026-96940Vulnerability

Reported by 9 independent sources · first reported by CERT-FR · last reported

Last reported 11 days ago

EPSS0.5%
higher than 40% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

12 reports, newest first · the exact sentence from each
  1. “…776, CVE-2026-96844, CVE-2026-83760, CVE-2026-88158, CVE-2026-87692, CVE-2026-77910, CVE-2026-87696, CVE-2026-70571, CVE-2026-70279, CVE-2026-96940, CVE-2026-87695, CVE-2026-88196, CVE-2026-88197, CVE-2026-105596, CVE-2026-105595, CVE-2026-102849, CVE-2026-102850, CVE-2026-105716…”

    Qualys Threat ResearchVendor
    Microsoft Patch Tuesday, October 2026 Security Update Review
  2. “CVE-2026-96940: Microsoft Exchange Server Elevation of Privilege Vulnerability”

    Cisco TalosVendor
    Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
  3. “CVE-2026-96940”

    SANS Internet Storm CenterVendor
    October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)
  4. “Van de kwetsbaarheid met kenmerk CVE-2026-96940 is eerder al een out-of-band update verschenen, maar is ook opgenomen in deze cumulatieve update.”

    NCSC-NL advisoriesGovernment
    NCSC-2026-0419 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Excange Server
  5. “…ndles for WooCommerce WordPress plugin), CVE-2026-94504 (Ninja Forms WordPress plugin), CVE-2026-105133, CVE-2026-105134 (AhsayCBS), CVE-2026-96940 (Microsoft Exchange Server), CVE-2026-63277 (LibreOffice), CVE-2026-59265 (Apache OpenOffice), and multiple vulnerabilities in WordP…”

    The Hacker NewsNews
    ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
  6. “CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely”

    Security AffairsNews
    Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION
  7. “Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)”

    Help Net SecurityNews
    Week in review: FortiBleed is still active, Patch Tuesday forecast
  8. “CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely”

    Security AffairsNews
    CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely
  9. “Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2026-96940”

    Canadian Centre for Cyber SecurityGovernment
    Microsoft security advisory (AV26-1001)
  10. “The vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.”

    The Hacker NewsNews
    Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes
  11. “Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)”

    Help Net SecurityNews
    Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)
  12. “Bulletin de sécurité Microsoft CVE-2026-96940 du 02 octobre 2026”

    CERT-FRGovernment
    Vulnérabilité dans Microsoft Exchange Server (05 octobre 2026)

Indicators reported together

named in the same reports
Copy these 3 indicators · defanged

Also named with it: CVE-2026-21589, CVE-2026-86360, CVE-2026-102255, CVE-2026-47483, CVE-2026-102489, CVE-2026-102490, CVE-2026-88779, CVE-2026-59265, CVE-2026-63277, CVE-2026-86361, CVE-2026-86362, CVE-2026-91140, CVE-2026-106197, CVE-2026-106358, CVE-2026-106382, CVE-2026-106347, CVE-2026-102404

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-96940 here?
No account needed. We do not store your IP address.