Microsoft Exchange 2016/2019 ESU ends October 2026

Wed, 22 Jul 2026 12:46:13 +0000

Engineer — Plan: If you still run Exchange 2016 or 2019 on-premises, schedule migration to Exchange Online or a supported version before October; after that date, unpatched RCE vulnerabilities will go unfixed on a historically targeted mail server.
SOC/IR — Skip
Leader — Plan: Confirm whether on-premises Exchange 2016/2019 remains in the estate; EOL removes the vendor’s security backstop and raises audit/compliance risk — budget and timeline for migration or decommission should be locked this quarter.

Exchange on CuraSec