Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

2026-10-05T19:24:00Z•db66bddd8142ada71f182063e5510d41ca695a39ae9b1e4c328fe63005541390
CVE-2026-104286CVE-2026-61500CVE-2026-63688CVE-2026-88779CVE-2026-96940AI securityAndroidCISA KEVDell CSMFortiMailMicrosoft ExchangeNetScalerRealtek Jungle SDKRejetto HFSSharePointactive-exploitationarbitrary-file-writeauthentication-bypassbackdoorbotnetcredential-theftespionagemacOSphishingprivilege-escalationransomwareremote-code-executionvulnerabilityzero-day

What happened

The document aggregates cybersecurity news from October 2026, including actively exploited zero-days, critical vulnerabilities, ransomware, espionage campaigns, credential phishing, botnets, backdoors, and security product updates. Notable issues include unauthenticated arbitrary file writes in FortiMail, NetScaler zero-day exploitation, Rejetto HFS session forgery leading to remote code execution, Dell CSM flaws enabling unauthenticated administrative access and Kubernetes node root, Microsoft Exchange privilege escalation, and attacks against SharePoint and Realtek Jungle SDK. It also covers

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
db66bddd8142ada71f182063e5510d41ca695a39ae9b1e4c328fe63005541390
Enrichment time
2026-10-05T19:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.