Dashboard / CVE-2026-69646

CVE-2026-69646

HIGH
MEDIUM Priority: 0.03 BB Relevance: 62/100
Published: 2026-09-08 Modified: 2026-11-10 First seen: 2026-10-30 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: Low

Description

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Microsoft Skype for Business Server 2015 CU13 9319.0 < 6.0.9319.885
Microsoft Skype for Business Server 2015 CU13 9319.0 < 6.0.9319.885
Microsoft Skype for Business Server 2015 CU13 9319.0 < 6.0.9319.885
Microsoft Skype for Business Server 2019 CU8 2046.0 < 7.0.2046.569
Microsoft Skype for Business Server 2019 CU8 2046.0 < 7.0.2046.569
Microsoft Skype for Business Server 2019 CU8 2046.0 < 7.0.2046.569
Microsoft Skype for Business Server Subscription Edition CU1 2046.0 < 7.0.2046.879
Microsoft Skype for Business Server Subscription Edition CU1 2046.0 < 7.0.2046.879
Microsoft Skype for Business Server Subscription Edition CU1 2046.0 < 7.0.2046.879

References & Advisories (1)

Bug Bounty Relevance

62 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.3 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C

EPSS — Exploitation Probability

0.32%
Raw Score 0.003200
Percentile 25.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00320
2026-11-12
0.00320
2026-11-10
0.00320
2026-11-09
0.00320
2026-11-08
0.00320
2026-11-07
0.00320
2026-11-06
0.00320
2026-11-05
0.00320
2026-11-04
0.00320
2026-11-03
0.00320
2026-11-02
0.00320
2026-11-01
0.00320
2026-10-31
0.00320
2026-10-30
0.00320

Intelligence Sources

mitre ref →

External Links