Windows iSNS CVE-2026-68895

Requires an existing low-privileged local account on the target Windows system (PR:L, AV:L). The Internet Storage Name Service component must be installed and running - this is a non-default optional Windows feature primarily deployed in iSCSI SAN environments. Exploitation is constrained to the local system (no network path), requires no user interaction, and carries no special complexity barriers beyond the need for local authentication. Systems that have not installed the iSNS Server feature are not affected regardless of OS version.

Real-world risk is moderate-to-low despite the C:H confidentiality rating. The CVSS 5.5 score reflects the local-only attack vector (AV:L) and low-privilege requirement (PR:L), which significantly constrain the attacker population - exploitation requires an existing foothold on the target host. EPSS data is absent from the provided intelligence, and neither CISA KEV nor any public proof-of-concept is referenced, indicating no confirmed widespread exploitation. The high confidentiality impact (C:H) suggests a meaningful data exposure when triggered, potentially leaking kernel-mode data or sensitive SAN configuration. However, iSNS is a specialized storage networking service not universally deployed, further limiting the realistic attack surface. The primary concern is post-compromise lateral movement or privilege escalation chains in iSCSI-heavy enterprise storage environments where iSNS is actively running.

An attacker who has already obtained a low-privileged local user account on a Windows Server running the iSNS service submits a malformed iSNS registration or query that triggers the numeric truncation flaw, causing the service to return or expose portions of unintended memory - potentially revealing iSCSI target credentials, internal configuration, or sensitive kernel state. No public exploit code has been identified at time of analysis.