coldbraid

CVE-2026-105588 Microsoft Windows Server 2016

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVSS
6.4 Medium
EPSS
0.3%
Percentile
17
Published
2026-11-10
Force
4 of 12

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-306

In the news