{"vulnerability": "CVE-2026-96940", "sightings": [{"uuid": "294e7c38-3ecf-41a1-88d8-dcb1bd15dc2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d3hnbwmq6tuxv", "content": "CVE-2026-96940 - Microsoft Exchange Server Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-96940\n \n Published : Oct. 2, 2026, 7:06 p.m. | 15\u00a0minutes ago\n \n Description : None\n \n Severity: 8.8 | HIGH\n \n Visit the link for more details, such as CVSS details, affected prod...", "creation_timestamp": "2026-10-02T19:58:14.503307Z"}, {"uuid": "927c34af-326b-44f1-951b-726602f485eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mwwecieask2s", "content": "Es gibt mehrere #Sicherheits #Updates f\u00fcr #Microsoft #Exchange #Server, die gleich mehrere Schwachstellen, u.a. die Elevation of Privilege-Schwachstelle #CVE-2026-96940 schlie\u00dfen.\n\nborncity.com/blog/2026/10...", "creation_timestamp": "2026-10-02T21:53:44.665263Z"}, {"uuid": "ca0801b6-6a25-48c1-903f-6b9cd97495c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117373543357428712", "content": "Es gibt mehrere #Sicherheits #Updates f\u00fcr #Microsoft #Exchange #Server, die gleich mehrere Schwachstellen, u.a. die Elevation of Privilege-Schwachstelle #CVE-2026-96940 schlie\u00dfen.\nhttps://borncity.com/blog/2026/10/02/exchange-server-sicherheits-updates-vom-2-10-2026-schliessen-cve-2026-96940/", "creation_timestamp": "2026-10-02T21:55:40.950673Z"}, {"uuid": "c189306f-8242-4f7c-8f0c-8757035258c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/eightwone.com/post/3mwwkzpwro22z", "content": "PSA: Exchange Server V2 Security Updates for September were published, additionally addressing CVE-2026-96940 eightwone.com/2026/10/03/v... #MSExchange", "creation_timestamp": "2026-10-02T23:54:07.288727Z"}, {"uuid": "aa66b310-0505-417c-b11e-a6f0e25658fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwwoq6e6mj2i", "content": "Microsoft's September 2026 V2 Exchange Server security updates add CVE-2026-96940 for Exchange SE, 2019 and 2016. Install them now.\n\n#Microsoft #ExchangeServer #ExchangeSE #CVE202696940 #SecurityUpdate #PatchManagement #ESU", "creation_timestamp": "2026-10-03T01:00:21.636988Z"}, {"uuid": "072ad397-958c-44d6-b543-d35075f8d186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/andresbohren.bsky.social/post/3mwx7tn3mxc2x", "content": "\ud83d\udea8New #ExchangeServer SE SU10 V2 has been released out of band\n- V2 release is an addition of CVE-2026-96940\ntinyurl.com/mry232bw", "creation_timestamp": "2026-10-03T06:06:33.518997Z"}, {"uuid": "36459bd5-4c0d-4ee9-a775-bc598a90b02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/windowsfaq.bsky.social/post/3mwxjxop5gc2v", "content": "Neues Exchange Server Sicherheitsupdate:\nMicrosoft schlie\u00dft mit den V2-Updates CVE-2026-96940 mit CVSS 8,8. Betroffen sind Exchange SE sowie Exchange 2019 und 2016 im ESU-Programm.\n\nwww.windows-faq.de/2026/10/03/c...\n#ExchangeServer #Microsoft #Cybersecurity", "creation_timestamp": "2026-10-03T09:07:44.870438Z"}, {"uuid": "1dd0e2fa-b2bc-4548-80e0-44f4ac88a041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117376670919763256", "content": "CVE-2026-96940 - Privilege Escalation in Microsoft Exchange Server from weak authorization. CVSS 8.8. Currently unpatched. Restrict network access now. #CVE #Microsoft #infosec\nhttps://www.valtersit.com/cve/CVE-2026-96940/", "creation_timestamp": "2026-10-03T11:11:05.470884Z"}, {"uuid": "23fcd837-cbb8-4dd3-9462-70ace6c8200d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mwyaljkyvk2q", "content": "High-severity flaw in Exchange (CVE-2026-96940) lets authenticated users access others\u2019 mailboxes\u2014Patch with September 2026 V2 now. #ExchangeServer #Microsoft https://thedailytechfeed.com/microsoft-urges-microsoft-exchange-server-users-to-patch-new-high-severity-flaw-cve-2026-96940/", "creation_timestamp": "2026-10-03T15:52:32.780299Z"}, {"uuid": "d6a32073-84bc-4512-92f5-06d3a311cbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117377926010808121", "content": "We have just added an important vulnerability affecting Microsoft Exchange Server (CVE-2026-96940) https://vuldb.com/vuln/413205", "creation_timestamp": "2026-10-03T16:30:15.978757Z"}, {"uuid": "878699a4-5556-4896-82d3-bfec44d184dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyjh25m6l2b", "content": "\ud83d\udfe0 CVE-2026-96940 - High (8.8)\n\nWeak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-96940/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T18:31:06.323338Z"}, {"uuid": "b772fe19-8482-4eff-a037-efd1336f69fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mwzkqcebep2a", "content": "On-premises Exchange administrators must install V2 security updates to fix elevation flaws (CVE-2026-96940) #patchmanagement", "creation_timestamp": "2026-10-04T04:26:49.567969Z"}, {"uuid": "619fba70-8074-425b-bd40-ef0d0a4d2727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwztdfoloh25", "content": "CVE-2026-96940 is trending. Hype score 7, currently #6 on cvemon.\n\nWeak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-96940", "creation_timestamp": "2026-10-04T07:00:42.585452Z"}, {"uuid": "34802aa7-5208-4017-a16b-c846762c4d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mx4cidzrykzg", "content": "Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940 https://gbhackers.com/microsoft-releases-emergency-exchange-server-update/", "creation_timestamp": "2026-10-05T06:37:12.071027Z"}, {"uuid": "a1611690-fef4-4516-bb65-974c4363efe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/cyberbannews_ir/23897", "content": "\u2666\ufe0f \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 Exchange Server \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\n\n\ud83d\udd3a \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u0646\u0633\u062e\u0647 \u062f\u0648\u0645 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f6\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0645 \u062f\u0631 Exchange Server \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f.\n\n\ud83d\udd3b \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-96940 \u0648 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06f8.\u06f8 \u0627\u0632 \u06f1\u06f0\u060c \u0646\u0627\u0634\u06cc \u0627\u0632 \u0636\u0639\u0641 \u062f\u0631 \u0633\u0627\u0632\u0648\u06a9\u0627\u0631 \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062d\u0631\u0627\u0632\u200c\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0648\u062f \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0648 \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u062e\u0627\u0631\u062c \u0627\u0632 \u0645\u062d\u062f\u0648\u062f\u0647 \u0645\u062c\u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udd39 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631:\n\n\ud83d\udd39 Exchange Server 2016 CU23\n\n\ud83d\udd39 Exchange Server 2019 CU14 / CU15\n\n\ud83d\udd39 Exchange Server Subscription Edition\n\n\ud83d\udd39 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0647\u0645\u0686\u0646\u0627\u0646 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc Exchange \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f6 \u0631\u0627 \u062f\u0631 \u0627\u0648\u0644\u0648\u06cc\u062a \u0642\u0631\u0627\u0631 \u062f\u0647\u0646\u062f.\n\n#\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a #\u062a\u0647\u062f\u06cc\u062f_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\ud83d\udcc4\ud83d\udd0d @cyberbannews_ir", "creation_timestamp": "2026-10-05T05:23:11.000000Z"}, {"uuid": "429a8d38-bfb3-44e4-8155-852f6f521845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/15444", "content": "Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940 \u2013 gbhackers.com\n\nMon, 05 Oct 2026 13:06:27", "creation_timestamp": "2026-10-05T08:03:33.000000Z"}, {"uuid": "57bdc5d1-4216-4ff4-afec-4ab5918bdcbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/26652", "content": "Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940 \u2013 gbhackers.com\n\nMon, 05 Oct 2026 13:06:27", "creation_timestamp": "2026-10-05T08:03:33.000000Z"}, {"uuid": "0c3a5ce9-703e-4408-b974-65ef198574c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/17258", "content": "Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940 \u2013 gbhackers.com\n\nMon, 05 Oct 2026 13:06:27", "creation_timestamp": "2026-10-05T08:03:33.000000Z"}, {"uuid": "c83ee381-1ff4-4411-b713-1ee8c5907305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mx4qbwesnk2k", "content": "Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/10/05/e...\n\n#cybersecurity #cybersecuritynews #MicrosoftExchange #securityupdate #vulnerability @microsoft.com", "creation_timestamp": "2026-10-05T10:44:11.857136Z"}, {"uuid": "95eea909-b039-4aa4-9d04-4df83158c439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mx4qcm45yy2w", "content": "Exchange Server\u306e\u30a2\u30a6\u30c8\u30aa\u30d6\u30d0\u30f3\u30c9\u66f4\u65b0\u3001\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u308f\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-96940\uff09\u3092\u4fee\u6b63\n\nMicrosoft\u306f\u3001Exchange Server\u5411\u3051\u306b\u30a2\u30a6\u30c8\u30aa\u30d6\u30d0\u30f3\u30c9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u4fee\u6b63\u3055\u308c\u305f\u306e\u306f\u91cd\u8981\u5ea6\u300c\u9ad8\u300d\u306e\u8106\u5f31\u6027\uff08CVE-2026-96940\uff09\u3067\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u653b\u6483\u8005\u304c\u540c\u3058\u7d44\u7e54\u5185\u306e\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30e1\u30fc\u30eb\u3084\u6dfb\u4ed8\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u305f\u3060\u3057\u3001\u300c\u30c6\u30ca\u30f3\u30c8\u306e\u5883", "creation_timestamp": "2026-10-05T10:44:31.546220Z"}, {"uuid": "de0b8e4a-aa1e-4f28-9624-0ef83e30b09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mx4rmlhiut2u", "content": "Microsoft Issues Out-of-Band Patch for CVE-2026-96940 in Exchange Server", "creation_timestamp": "2026-10-05T11:08:00.398067Z"}, {"uuid": "5c8f111a-620c-490b-81b1-dcd5b4728dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mx4seymel42p", "content": "Microsoft dropped an emergency patch for CVE-2026-96940 because authenticated miscreants can freely read everyone's mail. Cancel your evening plans, because of course you must.\n\n#justanothertue #patchfatigue", "creation_timestamp": "2026-10-05T11:21:39.367444Z"}, {"uuid": "bcdaaf46-1801-410d-b184-5f7fd29817e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/kelvinsecteam.bsky.social/post/3mx4thkb5il22", "content": "Microsoft patched Exchange Server CVE-2026-96940. This high-severity bug lets authenticated attackers read other users' emails and attachments within the same organization but does not cross tenant boundaries. Discovered internally with no known active exploitation.", "creation_timestamp": "2026-10-05T11:40:59.194267Z"}, {"uuid": "37b637ba-2840-444d-bf24-f6b8aa98bee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx52fj2hty24", "content": "\ud83d\udd17 CVE : CVE-2026-96940, CVE-2026-96940", "creation_timestamp": "2026-10-05T13:45:06.658569Z"}, {"uuid": "a55c000d-5c96-46eb-8f58-63809891161e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mx5bsdr5r22s", "content": "Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)\n\nwww.helpnetsecurity.com/2026/10/05/e...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-10-05T15:57:34.486936Z"}, {"uuid": "2588b167-f76b-41a3-aa70-1c7f85a6894a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/psoheil.bsky.social/post/3mx5f7wgums2b", "content": "\ud83d\udea8 Microsoft released out-of-band security update for high-severity Exchange Server vulnerability, CVE-2026-96940, rated 8.8  CVSS.\n\n#Cybersecurity #MicrosoftExchange #Vulnerability #InfoSec #EmailSecurity #CloudSecurity #PatchManagement #ZeroTrust #CyberThreats\n\nthehackernews.com/2026/10/micr...", "creation_timestamp": "2026-10-05T16:58:53.015342Z"}, {"uuid": "87a71e40-402f-43bd-81f2-306f7c885bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/dastechno.com/post/3mx5jthmait2t", "content": "Exchange-L\u00fccke CVE-2026-96940: Fremde Postf\u00e4cher lesbar \u2013 Update\n\nMicrosoft schlie\u00dft mit einem au\u00dferplanm\u00e4\u00dfigen Update eine Exchange-L\u00fccke (CVSS 8,8), \u00fcber die angemeldete Nutzer fremde Mails lesen k\u00f6nnen. Betroffen sind nur lokale Server.\n\n#News", "creation_timestamp": "2026-10-05T18:21:21.606128Z"}, {"uuid": "27b9db23-5ba9-4285-a6a6-1b14864102f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mx5jwgmh2h2i", "content": "\ud83e\udd16 Microsoft patched CVE-2026-96940 (CVSS 8.8) in Exchange Server out-of-band: weak authorization lets an authenticated attacker escalate privileges and read other users' mailboxes.\nhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T18:23:00.600029Z"}, {"uuid": "ca7d5889-c1f6-4b10-b427-9910303d3b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/thehackernews/10245", "content": "\u203c\ufe0f ALERT - Exchange admins should review this now.\n\nCVE-2026-96940 can allow an authenticated attacker to access other users\u2019 mailboxes and read emails and attachments within the same organization.\n\nMicrosoft has issued out-of-band fixes.\n\nRead: https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T16:27:18.000000Z"}, {"uuid": "2b5b750a-04aa-4cba-a755-48b6d0557146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10245", "content": "\u203c\ufe0f ALERT - Exchange admins should review this now.\n\nCVE-2026-96940 can allow an authenticated attacker to access other users\u2019 mailboxes and read emails and attachments within the same organization.\n\nMicrosoft has issued out-of-band fixes.\n\nRead: https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T16:27:18.000000Z"}, {"uuid": "dc19480a-4f37-4427-94e0-663d0d6cdd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-av26-1001", "content": "", "creation_timestamp": "2026-10-05T11:53:16.000000Z"}, {"uuid": "009752d6-3b92-4cbe-a568-45812db3714d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mx5vag6uiz24", "content": "Microsoft issued out-of-band fixes for CVE-2026-96940 in Exchange Server. The flaw could let authenticated attackers elevate privileges and read other users' mailboxes in the same organization. #MicrosoftExchange #CVE202696940 #OutOfBand", "creation_timestamp": "2026-10-05T21:45:27.784935Z"}, {"uuid": "9aac2211-8e21-4176-8efd-6def025edf74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mx5vvdoid72k", "content": "Microsoft Exchange Server\u306b\u8a8d\u8a3c\u3055\u308c\u305f\u653b\u6483\u8005\u306b\u3088\u308a\u3001\u4ed6\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u304c\u8aad\u307f\u53d6\u3089\u308c\u308b\u8106\u5f31\u6027\uff08CVE-2026-96940\uff09\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-10-05T21:57:09.174337Z"}, {"uuid": "7b48c82a-9ff7-441e-b60e-e7e07e03a3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/securestep9/statuses/117390779687564784", "content": "#Microsoft Exchange Vulnerabilty CVE-2026-96940 Lets Authenticated Attackers Read Other Users' Mailboxes:\n\ud83d\udc47\nhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T22:59:05.784161Z"}, {"uuid": "e9dd1fb4-2448-461d-b365-30fc23fc27c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mx5ze57g7c22", "content": "#Microsoft Exchange Vulnerabilty CVE-2026-96940 Lets Authenticated Attackers Read Other Users' Mailboxes:\n\n\ud83d\udc47", "creation_timestamp": "2026-10-05T22:59:06.980838Z"}, {"uuid": "0ec253bb-1e21-40af-80c7-161f5d66102b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117390847445054802", "content": "\u203c\ufe0f ALERT - Exchange admins should review this now.\nCVE-2026-96940 can allow an authenticated attacker to access other users\u2019 mailboxes and read emails and attachments within the same organization.\nMicrosoft has issued out-of-band fixes.\nRead: https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T23:16:19.418400Z"}, {"uuid": "51498511-2159-4d91-814a-a105ccb6acde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/VulnerabilityNews/44774", "content": "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\n\nMicrosoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.\n\n\"Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a\nhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T23:01:06.000000Z"}, {"uuid": "1ca497ef-94ef-4f39-8be5-bcbf90e69b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/44774", "content": "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\n\nMicrosoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.\n\n\"Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a\nhttps://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-05T23:01:06.000000Z"}, {"uuid": "b8826864-bf70-4b01-a703-d5ff2968d5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/pphm_HackerNews/3458", "content": "\ud83d\udd34 Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\n\nMicrosoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions.\n\nThe vulnerability, tracked as CVE-2026-96940, is rated 8.8 on the CVSS scoring system.\n\n\"Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network,\" Microsoft said in an advisory released on October 2, 2026.", "creation_timestamp": "2026-10-06T01:18:04.000000Z"}, {"uuid": "66802a1a-36d8-4265-bbf2-df6dec8e5f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mx6qx7thhtxp", "content": "Five critical infrastructure flaws under active attack\n\n\u2022 vm2 sandbox escapes enable arbitrary code execution\n\u2022 CVE-2026-96940: Exchange privilege escalation flaw\n\n5 sources verified \u00b7 hackingallthethings.com\n#infosec #threatintel #cybersecurity #CriticalVulnerabilities #InfrastructureSecurity", "creation_timestamp": "2026-10-06T06:06:46.768962Z"}, {"uuid": "1e951b06-7872-4c76-ac17-a505bac49a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mx6ravb2ri2u", "content": "Five critical infrastructure flaws under active attack\n\n\u2022 vm2 sandbox escapes enable arbitrary code execution\n\u2022 CVE-2026-96940: Exchange privilege escalation flaw\n\n5 sources verified \u00b7 mashingallthethings.com\n#infosec #threatintel #potatosecurity #CriticalVulnerabilities #InfrastructureSecurity", "creation_timestamp": "2026-10-06T06:06:48.902195Z"}, {"uuid": "29b1d06a-958f-4d03-a5b5-e7c21a51b714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mx6u75ilxs24", "content": "Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)\n\nMicrosoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to re\u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-10-06T06:59:31.080775Z"}, {"uuid": "55c47c1e-2ff6-4a3e-983f-e59348387132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "content": "", "creation_timestamp": "2026-10-06T07:00:14.000000Z"}, {"uuid": "346f0c19-8212-43c8-9463-865a72bcd833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117393145545135883", "content": "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\nMicrosoft has released out-of-band security updates for a high-severity flaw in Microsoft Exchange Server tracked as CVE-2026-96940 (CVSS 8.8). Weak authorization allows an authenticated attacker to elevate privileges and read other users' mailboxes under certain conditions. https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html", "creation_timestamp": "2026-10-06T09:00:45.639110Z"}, {"uuid": "caa0285e-6b1b-4533-b87b-71a6f54cdf66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mx72xyr6zy2a", "content": "Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes\n\nMicrosoft has released out-of-band security updates for a high-severity flaw in Microsoft Exchange Server tracked as CVE-2026-96940 (... https://threatintel.cc/2026/10/06/microsoft-exchange-flaw-lets-authenticated.html", "creation_timestamp": "2026-10-06T09:00:46.630391Z"}, {"uuid": "6692e4e4-03a4-4329-abf2-8aa7d2136702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "published-proof-of-concept", "source": "Telegram/7x3P5T--NflQEsWSvG6uL2FcSk64zEA_ybgHP6Fl6W75d5A", "content": "", "creation_timestamp": "2026-10-06T07:00:14.000000Z"}, {"uuid": "f3036b6e-f7ae-437e-9df2-91ce0106db1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "content": "", "creation_timestamp": "2026-10-06T09:00:04.000000Z"}, {"uuid": "c4684c7d-0433-4fb3-bbe2-ff14d214d5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "published-proof-of-concept", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "content": "", "creation_timestamp": "2026-10-06T09:00:04.000000Z"}, {"uuid": "12a9fd17-41d9-45b4-869e-c0bdb1dc5eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-microsoft-exchange-server-met-risico-op-misbruik", "content": "", "creation_timestamp": "2026-10-06T03:14:06.000000Z"}, {"uuid": "73b39327-13e4-44ae-aae0-7d6c9711fbb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mx7hjgo4hv2p", "content": "Microsoft Exchange Server (on-prem): CVE-2026-96940, CVSS 8.8. Authenticated attackers can read other users' mailboxes. OOB patch is out now. Exchange Online already patched. #infosec https://0daynews.com/articles/2026-10-06-exchange-cve-2026-96940-mailbox-privilege-escalation/", "creation_timestamp": "2026-10-06T12:45:17.170069Z"}, {"uuid": "f6a0e1c9-e561-4475-98dc-bade27b013d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mx7newdqev26", "content": "Microsoft issues out-of-band patch for high-severity Exchange Server flaw (CVE-2026-96940). The 8.8 CVSS bug allows authenticated attackers to read other users' mailboxes. #Microsoft #Exchange #PatchTuesday #InfoSec\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-06T14:30:07.789008Z"}, {"uuid": "10c05acf-75c0-4170-9600-8191e7776987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/2tvbjy2hvzg4j", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely", "creation_timestamp": "2026-10-06T14:43:02.426652Z"}, {"uuid": "e314dbaf-6246-460e-ba9e-18a5c52fc756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mx7os5btu3v2", "content": "Microsoft released emergency updates for Exchange Server to fix CVE-2026-96940, a high-severity flaw that can let attackers gain higher privileges. Microsoft has released out-of-band security updates for Exchange Server to fix a high-severity vulnerability tracked as CVE-2026-96940 (CVSS score [\u2026]", "creation_timestamp": "2026-10-06T14:55:38.506326Z"}, {"uuid": "3eec189e-077e-4c9e-8b26-be57fdcb8b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/yasna.io/post/3mx7p3c3qvu2y", "content": "A high-severity Microsoft Exchange Server flaw (CVE-2026-96940) allows authenticated attackers to hijack mailboxes; thousands of servers remain unpatched.\n\n#Vulnerability #CVE #infosec\n\nFull synthesis & sources: yasna.io", "creation_timestamp": "2026-10-06T15:00:32.657676Z"}, {"uuid": "2025c743-a1d7-4705-92a5-f645028a401d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mx7ql6hiy227", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely\n\nsecurityaffairs.com/200476/secur...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-10-06T15:27:19.654988Z"}, {"uuid": "30106d3e-212a-4ae1-89d8-f04e6ba46677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/ctinow/257968", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely\nhttps://ift.tt/q6jbPSc", "creation_timestamp": "2026-10-06T14:39:11.000000Z"}, {"uuid": "88f6bcd8-41d2-417b-8beb-8c6e19f37475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "Telegram/4_sY8gvLBndqlTYhgEJA3t7em8vkFf6K17u1sY95b9LyPVnS", "content": "", "creation_timestamp": "2026-10-06T14:45:05.000000Z"}, {"uuid": "27db8fea-8b80-40d7-8c07-6245c3e1a709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://bsky.app/profile/redoracle.com/post/3mx7us4jc6m2t", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely https://redoracle.com/News/cve-2026-96940-microsoft-fixes-exchange-server-flaw-for-which.html #2026 #96940 #exchange", "creation_timestamp": "2026-10-06T16:42:46.702311Z"}, {"uuid": "99a62941-50c5-49e7-9e6b-54a861013bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "Telegram/b4aCYY0F7JbzCe0NhiU40WdCMZKxY9D-V3WoDDf3K5NesQ", "content": "", "creation_timestamp": "2026-10-05T18:42:47.000000Z"}, {"uuid": "5118232d-57ed-4c18-aef7-8f1870132c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxanb4w4cj2w", "content": "Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)\uff08Exchange Server\u306e\u7dca\u6025\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3001\u4ed6\u30e6\u30fc\u30b6\u30fc\u306e\u30e1\u30fc\u30eb\u95b2\u89a7\u306b\u3064\u306a\u304c\u308b\u9ad8\u6df1\u523b\u5ea6\u8106\u5f31\u6027\u3092\u4fee\u6b63\uff09 #HelpNetSecurity \uff08Oct 5\uff09\nwww.helpnetsecurity.com/2026/10/05/e...", "creation_timestamp": "2026-10-07T00:00:39.845481Z"}, {"uuid": "9b8da094-359c-4289-9f72-81bc8a62e31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mxb5fg52vkdb", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely https://securityaffairs.com/200476/security/cve-2026-96940-microsoft-fixes-high-severity-exchange-server-flaw.html", "creation_timestamp": "2026-10-07T04:50:06.855129Z"}, {"uuid": "14efc97f-f60f-4a1e-aada-3a75e383843c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/CyberDispatch/3256", "content": "Exchange admins should review this now.\n\nCVE-2026-96940 can allow an authenticated attacker to access other users\u2019 mailboxes and read emails and attachments within the same organization.", "creation_timestamp": "2026-10-06T09:32:12.000000Z"}, {"uuid": "3e804656-5d95-41a5-a98e-daf2963effbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxbfhzzzdi2o", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely\n\uff08Microsoft\u304cExchange Server\u306e\u9ad8\u6df1\u523b\u5ea6\u8106\u5f31\u6027\u3092\u7dca\u6025\u4fee\u6b63\u3001\u60aa\u7528\u53ef\u80fd\u6027\u300c\u9ad8\u3044\u300d\u3068\u8a55\u4fa1\uff09 #SecurityAffairs (Oct 6)\nsecurityaffairs.com/200476/secur...", "creation_timestamp": "2026-10-07T07:14:01.960610Z"}, {"uuid": "fffb93bd-9aeb-49ea-a657-3e2d7dc16155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mxbgfplgbb25", "content": "\ud83d\udce2 [VULN] Microsoft Exchange : la faille CVE-2026-96940 permet de lire les bo\u00eetes aux lettres des autres utilisateurs\n\nMicrosoft vient de publier, en dehors de son calendrier habituel, un correctif pour une faille de s\u00e9curit\u00e9 Exchange Server qui permet \u00e0 un utilisat\u2026\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "creation_timestamp": "2026-10-07T07:30:37.220004Z"}, {"uuid": "0d953c42-1032-4ae4-b00c-0e8ed2fa8770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117398816456415760", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely\nMicrosoft has released out-of-band security updates for Exchange Server to fix CVE-2026-96940, a high-severity (CVSS 8.8) weak authorization flaw that can let an authenticated attacker gain higher privileges. Microsoft assesses exploitation as more likely, SecurityAffairs reports. https://securityaffairs.com/200476/security/cve-2026-96940-microsoft-fixes-high-severity-exchange-server-flaw.html", "creation_timestamp": "2026-10-07T09:02:56.868712Z"}, {"uuid": "f663fdd2-10bc-49d7-8d50-73fbc37c5754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxblkthml726", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely\n\nMicrosoft has released out-of-band security updates for Exchange Server to fix CVE-2026-96940, a high-severity (CVSS 8.8) weak aut... https://threatintel.cc/2026/10/07/cve-microsoft-fixes-exchange-server.html", "creation_timestamp": "2026-10-07T09:02:57.535242Z"}, {"uuid": "55036f99-6fc5-4780-92c5-516d11eba588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mxbsqhi6eg2d", "content": "Exchange Server : la CVE-2026-96940 (CVSS 8,8) permet \u00e0 un utilisateur authentifi\u00e9 de lire les e-mails de ses coll\u00e8gues. Microsoft a publi\u00e9 un correctif hors bande, Exchange Online est d\u00e9j\u00e0 prot\u00e9g\u00e9. Pour les serveurs sur site, versions et KB ici :\nwww.it-connect.fr/exchange-ser...", "creation_timestamp": "2026-10-07T11:11:23.412519Z"}, {"uuid": "ff0d5c07-1cb3-46a1-bb58-33cfc9a394b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxbtipudgc24", "content": "CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely\n\nMicrosoft released emergency updates for Exchange Server to fix CVE-2026-96940, a high-severity flaw that can let attackers gain higher privileges. Microsoft has released out-of-\u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-10-07T11:24:59.908099Z"}, {"uuid": "b4fa81c9-f72b-4605-87b1-8e6f9bd255f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://t.me/true_secator/8689", "content": "\u041f\u043e \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-21589, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Atlassian, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Jira, Confluence \u0438 Bitbucket, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Previdian \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u044d\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438-\u043b\u043e\u0432\u0443\u0448\u043a\u0435, \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0442\u0447\u0435\u0442\u0430. \u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u0442\u0440\u0435\u0445 IP: 38.60.157[.]86, 146.70.187[.]234 \u0438 159.26.119[.]225.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-21589 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0435\u0441\u043b\u0438 \u0435\u043c\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0442\u043e\u0447\u043d\u043e\u0435 \u0438\u043c\u044f \u0438 \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u0443.\n\n\u0412 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a Atlassian \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u0441 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a CVE-2026-21589 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a Jira, Confluence \u0438 Bitbucket \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 Crowd.\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f - \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Atlassian, \u0430 watchTowr \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u0434\u043b\u044f CVE-2026-21589.\n\n2. SonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0440\u0438\u0441\u043a\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SMA1000.\n\nCVE-2026-102255 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Appliance WorkPlace \u043c\u043e\u0434\u0435\u043b\u0435\u0439 SMA1000 6210, 7210 \u0438 8200v, \u043d\u043e \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 SMA 100 Series \u0438\u043b\u0438 SSL-VPN, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 SonicWall.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043f\u0443\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n3. Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Framework \u0438 System, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u043c\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 System, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412 Framework \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0430 \u043f\u044f\u0442\u044c - \u043a EoP. \u0412 System \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a EoP, \u043f\u044f\u0442\u044c DoS, \u043e\u0434\u043d\u0430 RCE \u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n4. \u041a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0430\u044f \u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0432 LibreOffice \u0438 Apache OpenOffice.\n\n\u0410\u0442\u0430\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 Java \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435.\n\n\u041f\u043e\u043a\u0430 \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043b\u0438\u0448\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 PoC, \u0438 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043e\u0442 5 \u043e\u043a\u0442\u044f\u0431\u0440\u044f LibreOffice \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2026-63277, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 26.2.5 \u0438\u043b\u0438 26.8.0. \u0411\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b. \n\n\u0412 Apache OpenOffice \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-59265. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0439, 4.1.16, \u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.1.17, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n5. \u0415\u0449\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Chrome 155 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c 247 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Chromecast, Browser, Navigation \u0438 Track \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 \u0438 CVE-2026-106347.\n\n6. Microsoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Exchange Server \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e CVE-2026-96940 (CVSS 8,8).\n\n\u041e\u043d\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043d\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c Exchange. IT-\u0433\u0438\u0433\u0430\u043d\u0442 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0439\u00bb.", "creation_timestamp": "2026-10-07T17:05:07.000000Z"}, {"uuid": "55c0eb8e-ab41-499f-b648-52a7f811daca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxcxf2hkgg27", "content": "\ud83d\udccc Microsoft Releases Out-of-Band Security Update for High-Severity Exchange Server Vulnerability CVE-2... https://www.cyberhub.blog/article/32927-microsoft-releases-out-of-band-security-update-for-high-severity-exchange-server-vulnerability-cve-2026-96940", "creation_timestamp": "2026-10-07T22:07:09.374670Z"}, {"uuid": "40d02f63-6136-4e3f-a879-04196c51d684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mxdjohsfl52n", "content": "Microsoft released urgent updates for Exchange Server (CVE-2026-96940, CVSS 8.8) to fix a high-severity flaw that could let attackers escalate privileges. Stay updated!", "creation_timestamp": "2026-10-08T03:34:31.804012Z"}, {"uuid": "8b60c3d9-00f4-4ad7-a543-792eff90f725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/hey-kira.bsky.social/post/3mxdnwduxrj2n", "content": "Worth an update since you posted: public PoC code for CVE-2026-96940 appeared on GitHub on 6 Oct. The patch is the September V2 SU, KB5129955, for Exchange 2016/2019/SE. Microsoft's release note said no known exploitation at publication - that was written before the PoC landed.", "creation_timestamp": "2026-10-08T04:50:30.911796Z"}, {"uuid": "36163328-ac6f-43ce-a96a-7ca5e1f37dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxdrnhng352n", "content": "Atlassian CVE-2026-21589 exploit\u00e9e <2h apr\u00e8s le PoC.\nExchange Server CVE-2026-96940 (CVSS 8,8) : patch hors bande.\nCERT-FR : vague d'avis (OpenSSH, Veeam, SonicWall\u2026).\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1271/", "creation_timestamp": "2026-10-08T05:57:07.976922Z"}, {"uuid": "016c94c7-1e1f-41da-8695-b24c2007e272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96940", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxdvtezum52y", "content": "Vuln\u00e9rabilit\u00e9s \u00e9lev\u00e9es (7 \u2264 CVSS < 9) (suite)\n\u2022 Dell OpenManage Integration (Windows Admin Center) (CVE-2026-101207), CVSS 8.8 (Cyberveille Esant\u00e9)\n\u2022 Microsoft Exchange Server (CVE-2026-96940), CVSS 8.8 (IT-Connect)", "creation_timestamp": "2026-10-08T07:12:01.940123Z"}]}