CVE-2026-96940: Any Exchange User Can Read Any Other Mailbox, Patch Now A CVSS 8.8 weak-authorization flaw in on-premises Exchange Server lets any authenticated mailbox user read another user mailbox content. Exchange Online is already protected, on-prem is not. Oct 11, 2026 4 min read Exchange
