CVE-2026-69676 – Windows Kerberos Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A low-privileged attacker can turn authenticated network access into remote code execution, putting the confidentiality, integrity, and availability of affected Windows systems at risk.”
CVE-2026-69676 is a Critical Windows Kerberos remote code execution vulnerability caused by an authentication bypass through capture-replay (CWE-294). An authenticated attacker with low-level access to an affected server can send a specially crafted request over the network and execute code on that server. No user interaction is required. The vulnerability is not publicly disclosed and is not reported as exploited.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-294
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.