Rapid7 highlights two exploited flaws in September Patch Tuesday

Microsoft's September 2026 Patch Tuesday addressed 999 vulnerabilities, the highest in a single day, including 723 in Windows. Two flaws, CVE-2026-85880 and CVE-2026-81963, are being exploited in the wild. CVE-2026-85880 affects Windows but not Server 2025 or 11. CVE-2026-81963 has a CVSS score of 7.8. Google Chrome and Microsoft Edge patched CVE-2026-85046, but Microsoft did not issue an advisory. Upcoming product lifecycle changes include Windows 11 24H2 and Windows Server 2012 updates.

Original reporting
Published Sep 9, 2026, 12:43 AM UTC
Analysis
AlphAI AI DeskAI-generated
Added to AlphAI Sep 9, 2026, 10:28 AM UTC. Informational, not investment advice.
How this was made
AlphAI summarizes source reporting and applies a structured AI analysis for relevance, timing, sentiment and ticker impact. Always verify material claims with the original publisher.
Rapid7 highlights two exploited flaws in September Patch Tuesday — source image
Decision brief

The 30-second read

$MSFTBearishLow
01

Why it matters

The disclosed exploits may trigger short-term defensive trading in Microsoft and raise awareness of enterprise security risks.

02

Market read

Security vulnerability disclosures can cause brief price volatility in affected tech stocks, especially when active exploitation is confirmed.

03

What to watch

Potential for Microsoft to release emergency hotfixes or leverage the Rust rewrite narrative to reassure customers.

Relevance 5/10Novelty 5/10Timing: today

Background

Microsoft's September 2026 Patch Tuesday released 999 CVEs, the highest ever, with two actively exploited Windows flaws.

Company-level read

Ticker impact

$MSFTBearishMedium confidence
Context

Rapid7 reports Microsoft has two exploited vulnerabilities in September Patch Tuesday, indicating immediate security risk.

Expected impact

downside risk of 1-2% in the next trading session.

Evidence & confidence

Active exploitation can prompt enterprise customers to reassess exposure and may trigger short-term defensive positioning.

Market effects

Highlights ongoing vulnerability challenges for the software security sector.

May affect US and global enterprise software buyers monitoring patch risks.

Limited to firms with large Windows deployments; broader market impact minimal.

Counterpoint

Investors could view the disclosure as a temporary blip, expecting Microsoft to mitigate quickly.

Key entities

  • Microsoft

    US-listed software giant (MSFT) responsible for the patched products.

  • Rapid7

    Security research firm providing the exploitation analysis.

Related articles

$NVDALow

Tokenized Stocks 2026: How 63 U.S. Shares Will Trade 24/7

OKXICE, a joint venture between OKX and Intercontinental Exchange (ICE), plans to list tokenized versions of 63 U.S. stocks, including Nvidia, Tesla, and Apple, on a blockchain platform. The SEC's new 'innovation exemption' allows this trading, with a 0.25% daily volume cap per stock. Trading may begin as early as November, pending no objections from listed companies. Tokenized stocks will trade 24/7, but liquidity and price accuracy may vary, especially during weekends.

$MSFTMed

After tokenmaxxing backlash, Microsoft moves more agent work onto the desk

Microsoft announced plans to shift more AI agent work to local devices, reducing cloud dependency and costs. The company introduced the MAI-Code-1.1-Flash model for local coding, which resolved 70.8% of tasks in testing. Microsoft also launched the Surface Laptop Ultra with Nvidia RTX Spark hardware, starting at $2,599. GitHub's HydraFusion will route work between local and cloud models, with a preview coming soon.

$MSFTHigh

Microsoft’s $665 target hinges on a new AI advantage

Melius Research upgraded Microsoft (MSFT) to Buy with a $665 price target, citing AI security and governance demand. Microsoft's Azure, Microsoft 365, and cybersecurity tools position it to manage AI agents, with Agent 365 extending controls to AI. Azure revenue grew 43% in Q4, and Microsoft's cloud backlog increased 84% to $678 billion. Melius forecasts Azure growth of over 50% by fiscal 2027, driven by AI infrastructure and management needs.

$MSFTMedAI 8/10

Windows, Surface And RTX Spark Event: Everything AI Microsoft Unveiled

Microsoft unveiled new AI features and hardware at its Windows & Surface event. Key announcements include the general availability of Microsoft Execution Containers, the Agent 365 IT control platform, and the Surface Laptop Ultra with RTX Spark. New AI integrations for Windows 11 and pre-orders for RTX Spark-based systems were also announced. The event highlighted Microsoft's focus on securing and optimizing AI use cases on PCs.