Skip to content

CVE-2026-96940

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
October 3, 2026
Last Seen
October 3, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

On October 2, 2026, Microsoft disclosed CVE-2026-96940, a privilege escalation vulnerability in Microsoft Exchange Server. This flaw allows authenticated attackers to gain unauthorized access to other users' mailboxes within the same organization. The vulnerability has a CVSS score of 8.8, categoriz...

Public Exploits

Checking GitHub for proof-of-concept code…