VDB
CVE-2026-96940
CVE-2026-96940
PUBLISHED
CVSS 6.900000095367432 MEDIUM
As of October 2, 2026, Microsoft is affected by a vulnerability in the following products: Microsoft Exchange Server 2016 Cumulative Update 23 Prior to 15.01.2507.075 Microsoft Exchange Server 2019 Cumulative Update 14 Prior to 15.02.1544.048 Microsoft Exchange Server 2019 Cumulative Update 15 Prior to 15.02.1748.053 Microsoft Exchange Server Subscription Edition RTM Prior to 15.02.2562.053 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
EPSS 0.50% · 40.4th percentile
Risk Scores
CVSS 4.0
6.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.50%
40.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Prior | Prior to 15.02.1544.048 | |
| Prior | Prior to 15.02.2562.053 | |
| Prior | Prior to 15.02.1748.053 | |
| Prior | Prior to 15.01.2507.075 |
Timeline
- Oct 2, 2026 Coalition ESS Score
- Oct 2, 2026 CVE Published
- Oct 3, 2026 EPSS Score
- Oct 4, 2026 Security Advisory
- Oct 6, 2026 CVE Updated