Microsoft security advisory (AV26-1001)

Serial Number: AV26-1001Date: October 5, 2026 As of October 2, 2026, Microsoft is affected by a vulnerability in the following products: Microsoft Exchange Server 2016 Cumulative Update 23 Prior to 15.01.2507.075 Microsoft Exchange Server 2019 Cumulative Update 14 Prior to 15.02.1544.048 Microsoft Exchange Server 2019 Cumulative Update 15 Prior to 15.02.1748.053 Microsoft Exchange Server Subscription Edition RTM Prior to 15.02.2562.053 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2026-96940 Microsoft Security Update Guide