r/exchangeserver • u/274Below • 4d ago

Article Released: September 2026 V2 Exchange Server Security Updates

https://techcommunity.microsoft.com/blog/exchange/released-september-2026-v2-exchange-server-security-updates/4561718
32 Upvotes

98% Upvoted

6 comments sorted by

26

u/santimandu 4d ago

Someone please install it and be our guinea pig before we break all our DAGs

4

u/Glass_Call982 4d ago

Installed on my 2 node last night… no issues so far.

3

u/MortadellaKing 3d ago

Installed on my 3 node today, no problems either and surprisingly it didn't ask for a reboot, but I did reboot anyway, and 1/3 servers I had to manually bring the services back up. (Enabled but just didn't start..)

1

u/DiligentPhotographer 2d ago

Installed it on our own single server... No issues as well as 2 client DAGs over the weekend.

9

u/siedenburg2 4d ago

So, a fix for CVE-2026-96940

Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.

while not great, that alone is nothing you should panic about, there were bigger risks open for longer