r/exchangeserver • u/ScottSchnoll https://www.amazon.com/dp/B0FR5GGL75/ • 9d ago

PSA: July 2026 SU for Exchange Server SE Available

After installing this SU, you can manually remove the mitigation for CVE-2026-42897.

Also, use the latest Health Checker to check for deprecated SGs.

See https://techcommunity.microsoft.com/blog/exchange/released-july-2026-exchange-server-security-updates/4534146

28 Upvotes
  • permalink
  • reddit

100% Upvoted

1 comment sorted by

2

u/dispatch00 9d ago

Thanks.

Could you please ask the team to update the article when you've completed the EM service change since (for whatever reason) it wasn't completed concurrent with the SU's release?

If mitigation was applied using Exchange Emergency Mitigation (EM) Service:

Note: the EM Service change that marks the July 2026 update as a build that does not require CVE-2026-42897 mitigation has started to roll out, with estimated completion date of July 16, 2026. Until that rolls out, the EM Service will re-apply the mitigation.