EUVD-2026-73895
GHSA-79jv-pmjc-87cc
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Network-reachable iSCSI driver flaw, no auth needed, but victim must initiate an iSCSI connection (UI:R); kernel-level RCE yields full C/I/A impact.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
AnalysisAI
Remote code execution in Windows iSCSI is possible due to incorrect buffer size calculation (CWE-131), affecting a broad swath of Windows releases from Server 2012 through Server 2025 and Windows 10/11 across multiple feature versions. The CVSS vector (AV:N/AC:L/PR:N/UI:R) indicates a network-reachable, unauthenticated attack path requiring some user interaction - consistent with a scenario where a victim system initiates an iSCSI connection to a malicious target. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The Windows iSCSI initiator service must be in use and must attempt a connection to an attacker-controlled iSCSI target - either through poisoned iSNS/discovery infrastructure or by inducing reconnection to a malicious endpoint. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 score reflects high confidentiality, integrity, and availability impact over a network vector with no privileges required. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the applicable cumulative update for each affected Windows version as identified in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69598. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all Windows Server (2012 through 2025) and Windows 10/11 systems utilizing iSCSI connections to external storage targets. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-131 – Incorrect Calculation of Buffer Size
View allShare
External POC / Exploit Code
Leaving vuln.today