Public exploit code and disclosure timing

Public exploit code for CVE-2026-62911 is outpacing patching on 21,899 exposed Exchange servers

Microsoft patched the Exchange authentication bypass on August 11. Shadowserver's September 1 scan still counts 21,899 internet-facing servers unpatched, and NCSC-NL says working exploit code for full mailbox takeover is circulating.