Microsoft · Security update · October 2, 2026

KB5129958: October 2026 security update

KB5129958, released October 2, 2026, fixes 1 CVE in Microsoft Exchange Server 2016 Cumulative Update 23. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.0275
86th percentile

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege 8.8 0.0275 More likely
Showing 1 to 1 of 1 1