Vulnerability in Microsoft Exchange Server with risk of exploitation

A vulnerability, CVE-2026-96940, has been identified in Microsoft Exchange Server with a risk score of 8.8. An attacker with a valid account may obtain higher privileges than permitted. The likelihood of exploitation is assessed as medium and the potential damage as high. There are no reports or evidence of active exploitation.