CVE-2026-96940: Microsoft's Emergency Exchange Patch Fixes the Bug, Not the Blind Spot
Microsoft shipped an emergency fix for CVE-2026-96940, a critical Exchange flaw that let authenticated users read mailboxes they had no business touching. Patching closes the door. It doesn't tell you who already walked through it.















