Rafael Pfister

Founder & Messaging Expert

Practical knowledge for IT, cloud, and digital infrastructure

Founder of adeptio. I write about operating complex communication platforms, drawing on more than 14 years of architecture, engineering, and operations for some of Switzerland's largest companies.

Rafael Pfister Contact form
Latest article
Warning October 16, 2026 Exchange updates (SU & CU) 7 min read

Exchange Outages After the October 2026 Windows Server Updates: MapiExceptionMdbOffline (ec=1142)

After the Windows Server updates of October 13, 2026, Exchange servers report MapiExceptionMdbOffline (ec=1142) after around 24 hours: OWA fails, queues grow, and DAG copies stop replicating. Microsoft confirms the link to the Windows updates, but a fix is not yet available. Symptoms, affected KBs, verification commands, and recommended steps.

Read article →
Ticker Everything new at a glance
Live
Updated Oct 17
  1. Oct 16 Exchange Outages After the October 2026 Windows Server Updates: MapiExceptionMdbOffline (ec=1142) After the Windows Server updates of October 13, 2026, Exchange servers report MapiExceptionMdbOffline (ec=1142) after around 24 hours: OWA fails, queues grow, and DAG copies stop replicating. Microsoft confirms the link to the Windows updates, but a fix is not yet available. Symptoms, affected KBs, verification commands, and recommended steps. Exchange updates (SU & CU) · 7 min read Warning
  2. Oct 15 CVE-2026-76519: Cisco Secure Email Gateway Path Traversal Is Being Exploited - Update and Check for Compromise A crafted email attachment is all it takes: Through a path traversal vulnerability in the AMP File Reputation feature, attackers can write arbitrary files to Cisco Secure Email Gateway and execute commands with root privileges (CVE-2026-76519, CVSS 9.8). The vulnerability is being exploited. Updating the Content Scanner Tools or AsyncOS and checking for compromise are required. Vulnerabilities · 7 min read
  3. Oct 14 CVE-2026-96951: Windows Shell Mark of the Web Bypass Is Being Exploited—Install the October Update On October 13, 2026, Microsoft fixed an already exploited Windows Shell vulnerability (CVE-2026-96951, CVSS 8.8). Crafted files delivered by email or chat can bypass Mark of the Web protection. CISA lists the vulnerability in its KEV catalog; only the cumulative October update resolves it. Vulnerabilities · 6 min read
  4. October 2026 Exchange security updates: six vulnerabilities, final update for Exchange 2016 and 2019 The October SU closes six vulnerabilities, including a critical remote code execution issue through a crafted email, and fixes the .ics issue and the WordBreaker deadlock. It is the final update for Exchange 2016 and 2019, including under the ESU program. Exchange updates (SU & CU) · 7 min read
  5. Oct 13 New Exchange builds: Oct26SU SE RTM Oct26SU (15.2.2562.56) · 2019 CU15 Oct26SU (15.2.1748.55) · 2019 CU14 Oct26SU (15.2.1544.50) · 2016 CU23 Oct26SU (15.1.2507.77) 4 builds Exchange build
  6. Oct 7 Exchange Security Update September 2026 v2: Early Fix for CVE-2026-96940 On October 2, 2026, Microsoft released version 2 of the September SUs for Exchange SE, 2019, and 2016. It also addresses CVE-2026-96940, an elevation-of-privilege vulnerability with a CVSS score of 8.8 and an “Exploitation More Likely” assessment. Microsoft recommends installing v2 as soon as possible, including on servers running the first September SU. Exchange updates (SU & CU) · 5 min read
  7. September 2026 Exchange Security Updates: Nine Vulnerabilities, Wrapper Issue Fixed, v2 Released The September SU closes nine vulnerabilities in Exchange SE and 2019 (eight in Exchange 2016), including a spoofing vulnerability with CVSS 9.3, and fixes the wrapper issue in hybrid environments. A v2 with an additional CVE followed on October 2; there are also three known issues with workarounds and a SettingOverride that should now be removed. Exchange updates (SU & CU) · 11 min read
  8. Oct 6 Connecting digitalSTROM with Home Assistant: local integration and automations A local Home Assistant integration for the digitalSTROM server, plus motion-activated lighting, shower mode, music with 4× tapping, and automatic leaving via FRITZ!Box. Including the issues encountered in practice. Home Assistant and IoT · 13 min read
  9. CVE-2026-73570: Zimbra Command Injection via SNMP Is Being Exploited—Update to 10.1.20 and Check for Compromise A crafted email is all it takes: On Zimbra servers with the zimbra-snmp package and SNMP notifications enabled, attackers can execute commands as the zimbra user without authentication (CVE-2026-73570, CVSS 8.9). The vulnerability is being exploited and was fixed in 10.1.20. Update, apply the workaround until then, and check for web shells and persistence. Vulnerabilities · 8 min read
  10. CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Is Being Exploited—Update and Check for Compromise A specially crafted email is all it takes: via an SQL injection in AsyncOS, attackers can execute commands with root privileges on Cisco Secure Email Gateway (CVE-2026-76461, CVSS 9.8). The vulnerability is being exploited, and no workaround is available. Updating to a fixed version and checking for compromise are required. Vulnerabilities · 7 min read
Full ticker with 100 entries → RSS feed
CVE Tracker Updated daily

Live Updated Oct 17

Latest critical and actively exploited vulnerabilities in Exchange, Microsoft 365, AD and mail systems.

All 65 alerts in the CVE tracker →
Open Source
ownlist

Ownlist: own your list. Serverless newsletter on your own Cloudflare account (Workers + D1), one-click deploy, bring your own email sender.

TypeScript ★ 10
ha-portasplit-dashboard

Home Assistant dashboard for the Midea PortaSplit (Midea AC LAN, apexcharts-card)

★ 8
MailHeaderAnalyzer

PowerShell module: offline email header analysis (Received chain, SPF/DKIM/DMARC/ARC trust, Exchange Online hybrid headers, Defender verdicts, anomalies)

PowerShell ★ 3
paperless-cloud-storage

Run Paperless-ngx on a small disk: cloud-backed document store via rclone mount (rslave propagation + watchdog). Experimental.

Shell ★ 2

All projects →