Oct 2026: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-87696 Published on October 13, 2026

Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Vendor Advisory NVD

Weakness Type

Improper Verification of Cryptographic Signature

The software does not verify, or incorrectly verifies, the cryptographic signature for data.


Products Associated with CVE-2026-87696

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

 
 
 

Affected Versions

Microsoft Exchange Server 2016 Cumulative Update 23: Microsoft Exchange Server 2019 Cumulative Update 14: Microsoft Exchange Server 2019 Cumulative Update 15: Microsoft Exchange Server Subscription Edition RTM: