{
  "id": 19670578,
  "title": "Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era",
  "url": "https://urgent.news/2026/11/12/microsoft-exchange-server-2016-and-2019-enter-their-permanently-19670578",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-12T14:55:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/saas/2026/11/12/microsoft-exchange-server-2016-and-2019-enter-their-permanently-vulnerable-era/5309401"
  },
  "original_language": "en",
  "account": "Microsoft has declared that Exchange Server 2016 and 2019 are now permanently vulnerable following the release of security updates for the Subscription Edition. The warning is found in the documentation for November's security update for Exchange Server SE. Microsoft states that these versions of Exchange are no longer tested for vulnerabilities and that no updates are being released for them. The company has been emphasizing that customers using these versions should upgrade immediately for security reasons. Support for Exchange Server 2016 and 2019 officially ended on October 14, 2025, but Microsoft extended the Extended Security Updates program until April 14, 2026. However, this extension was also canceled on April 14, 2026. Microsoft offered a final six-month extension of paid security updates for these versions, but it became clear that some customers were still using the old software. The final Exchange Server 2016 and 2019 security updates were released on October 13, 2025, marking the end of any further patches or vulnerability testing for these versions.",
  "summary": "Upgrade, migrate, but don't prevaricate – time has run out",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}