On October 5, 2026, The Hacker News reported Microsoft, Microsoft Exchange Server, CVE-2026-96940. The figures I am keeping are CVE-2026-96940, 8.8. The framing is mine. Their sentences stay on their page.

The names I am willing to repeat are Microsoft, Microsoft Exchange Server, CVE-2026-96940, CVSS. The figures in the report are CVE-2026-96940, 8.8. The subject words I am keeping are vulnerability.

If this sits on a shop, a clinic, or a desk I run, I read the vendor notice before I tell anyone to patch.

Source I used: The Hacker News. The link is under this column.