Tech News
← Home  ·  All topics

Exchange Server

2 GoKawiil briefs on this topic

Microsoft confirms October Windows Server updates break Exchange mail flow, OWA sign-in

Microsoft has acknowledged that its October 2026 Windows Server security updates are causing some on-premises Exchange servers to fail at delivering mail or authenticating Outlook on the web users. Affected systems can show a MapiExceptionMdbOffline error and Event ID 1006, traced to a new default cap on simultaneous Endpoint Mapper lookup calls that proves too low for Exchange under heavy load. Microsoft says the problem stems from the Windows Server update itself, not the separate Exchange security patches, and is advising admins to raise a registry limit rather than uninstall updates.

21,899 Exchange servers still unpatched against CVE-2026-62911 flaw

Shadowserver has identified nearly 22,000 internet-exposed Microsoft Exchange servers that remain unpatched against CVE-2026-62911, a high-severity authentication bypass flaw affecting Exchange Server 2016, 2019, and Subscription Edition. Most vulnerable systems are located in the United States and Germany, where officials say roughly 85% of on-premises Exchange servers remain exposed despite Microsoft releasing a fix in August 2026.