CVE-2026-69415
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- EPSS probability
- 0.66%
- CWE
- CWE-306
- Published
- 2026-09-08
- Last modified
- 2026-09-18
Affected products
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
Weakness type
Related vulnerabilities
- CVE-2026-67277 — Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
- CVE-2026-81735 — UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution
- CVE-2026-65956 — KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF
- CVE-2026-92808 — Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise
- CVE-2026-82695 — Tenda AC18 Telnet telnet missing authentication
- CVE-2026-82694 — Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication
- CVE-2026-82693 — Tenda AC1206 Web UI telnet TendaTelnet missing authentication
- CVE-2026-80462 — Privilege Escalation in Progress Chef Automate