Microsoft has released Security Updates (SUs) for vulnerabilities found in:
Exchange Server Subscription Edition (SE)
Exchange Server 2019
Exchange Server 2016
SUs are available for the f...
Updated Jul 14, 2026
Version 6.0
Blog Post
Nino_Bilic Hello, we have mitigation applied by Exchange Emergency Mitigation (EM) Service, and we have not faced any issue after mitigation as we only used for Outbound SMTP relay and no mailboxes hosted.
Do we still need to follow below instructions to remove mitigations? it does not remove automatically after installation? or if we dont remove will there be any issue to the exchange functionality ?
- https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service#blocking-or-removing-mitigations. Because of our recommendation to keep the CVE-2026-42897 mitigation in place, we are not yet updating the mitigation to not apply to servers that are updated to June 2026 SU. Therefore, at this time, you must block the mitigation from re-applying first.
- https://learn.microsoft.com/Exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service#rollback-procedures-for-released-mitigations.
Please advise.
Nino_Bilic
Microsoft
MicrosoftYou don't need to do anything with mitigations in that case, no. Once you install the fix, you will have the fix AND mitigations (which are no removed automatically) - but that's OK as they are not blocking anything for your scenario.
Thank you! so, i just need to install June SU and we are all set?