CVE-2026-96940 Shows That Enterprise Authentication Still Confuses Having a Key With Being Allowed to Open Every Door

Microsoft’s release of the September 2026 V2 Security Update arrived with a cadence that the company itself described as “a bit strange.” When a vendor pushes an out-of-band patch for a vulnerability like CVE-2026-96940, the signal is…