Microsoft Pushes New Exchange V2 Update After Discovering New Security Flaw

Microsoft released September 2026 V2 security updates fixing an Exchange Server flaw (CVE-2026-96940) that lets authenticated attackers access other users’ mailboxes in the same organization via weak authorization. The flaw could expose email messages and attachments for on-premises Exchange deployments.