CVE-2026-62757
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.3
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
- EPSS probability
- 0.26%
- CWE
- CWE-347
- Published
- 2026-08-11
- Last modified
- 2026-09-16
Affected products
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 23H2
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
Weakness type
Related vulnerabilities
- CVE-2026-48558 — SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification
- CVE-2026-33746 — Convoy: JWT Signature Verification Bypass Allows Authentication as Arbitrary Users
- CVE-2026-31946 — OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow
- CVE-2026-33026 — nginx-ui Backup Restore Allows Tampering with Encrypted Backups
- CVE-2026-4478 — Yi Technology YI Home Camera HTTP Firmware Update ipc signature verification
- CVE-2026-34377 — Zebra has a Consensus Failure due to Improper Verification of V5 Transactions
- CVE-2026-56451 — A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validate
- CVE-2026-54782 — CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation