Dashboard / CVE-2026-50426

CVE-2026-50426

MEDIUM
MEDIUM Priority: 0.04 BB Relevance: 44/100
Published: 2026-07-14 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.

Weakness Classification (1)

Affected Software (36)

VendorProductVersion
Microsoft Windows 10 Version 1607 10.0.14393.0 < 10.0.14393.9339
Microsoft Windows 10 Version 1607 10.0.14393.0 < 10.0.14393.9339
Microsoft Windows 10 Version 1809 10.0.17763.0 < 10.0.17763.9020
Microsoft Windows 10 Version 1809 10.0.17763.0 < 10.0.17763.9020
Microsoft Windows Server 2012 6.2.9200.0 < 6.2.9200.26226
Microsoft Windows Server 2012 6.2.9200.0 < 6.2.9200.26226
Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.0 < 6.2.9200.26226
Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.0 < 6.2.9200.26226
Microsoft Windows Server 2012 R2 6.3.9600.0 < 6.3.9600.23291
Microsoft Windows Server 2012 R2 6.3.9600.0 < 6.3.9600.23291
Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.0 < 6.3.9600.23291
Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.0 < 6.3.9600.23291
Microsoft Windows Server 2016 10.0.14393.0 < 10.0.14393.9339
Microsoft Windows Server 2016 10.0.14393.0 < 10.0.14393.9339
Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.0 < 10.0.14393.9339
Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.0 < 10.0.14393.9339
Microsoft Windows Server 2019 10.0.17763.0 < 10.0.17763.9020
Microsoft Windows Server 2019 10.0.17763.0 < 10.0.17763.9020
Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.0 < 10.0.17763.9020
Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.0 < 10.0.17763.9020
Microsoft Windows Server 2022 10.0.20348.0 < 10.0.20348.5386
Microsoft Windows Server 2022 10.0.20348.0 < 10.0.20348.5386
Microsoft Windows Server 2025 10.0.26100.0 < 10.0.26100.33158
Microsoft Windows Server 2025 10.0.26100.0 < 10.0.26100.33158
Microsoft Windows Server 2025 (Server Core installation) 10.0.26100.0 < 10.0.26100.33158
Microsoft Windows Server 2025 (Server Core installation) 10.0.26100.0 < 10.0.26100.33158
microsoft windows_10_1607 < 10.0.14393.9339
microsoft windows_10_1607 < 10.0.14393.9339
microsoft windows_10_1809 < 10.0.17763.9020
microsoft windows_10_1809 < 10.0.17763.9020
Showing 30 of 36 entries

References & Advisories (1)

Bug Bounty Relevance

44 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

6.8 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS — Exploitation Probability

0.56%
Raw Score 0.005580
Percentile 46.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00558
2026-10-28
0.00558

Intelligence Sources

mitre ref →

External Links