Exchange Server August 2026 update disables OWA Light and fixes Pwn2Own bug
Microsoft’s August 2026 Exchange Server security update permanently disables OWA Light and addresses an authentication-bypass vulnerability that security researchers demonstrated at Pwn2Own. The release also determines whether Exchange Server 2016 and 2019 customers can continue receiving updates: only organizations enrolled in Period 2 Extended Security Updates are eligible.
Source
👉@sysadminoff
https://4sysops.com/archives/exchange-server-august-2026-update-disables-owa-light-and-fixes-pwn2own-bug/
Post #19309
67
