Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

Microsoft has released security updates to fix a high-severity flaw in Microsoft Exchange Server. The vulnerability allows an authenticated attacker to escalate privileges under certain conditions, potentially enabling them to access other users' mailboxes. The flaw is rated 8.8 on the CVSS scoring system, indicating a significant level of severity. An attacker must be authenticated to exploit this weakness, which is related to weak authorization in Microsoft Exchange Server. The vulnerability is tracked as CVE-2026-96940. This issue could be exploited by attackers to gain elevated privileges over a target system.