CVE-2026-0386: Windows Deployment Services Remote Code Execution Vulnerability
Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network.
Other sources
Windows Deployment Services Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.25868Patch KB5073698 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.22968Patch KB5073696 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.28117Patch KB5073699 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.23717Patch KB5073700 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.8783Patch KB5073722 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.4648Patch KB5073457 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.32230Patch KB5073379 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.2092Patch KB5073450 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.8276Patch KB5073723
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0386?
CVE-2026-0386 has been assigned a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2026-0386?
You can fix CVE-2026-0386 by applying the appropriate security patches provided by Microsoft for your affected operating system.
Which versions of Windows are affected by CVE-2026-0386?
CVE-2026-0386 affects multiple versions of Windows Server, including 2008, 2012, 2012 R2, 2008 R2, 2016, 2019, 2022, and 2025.
Is user interaction required to exploit CVE-2026-0386?
No, exploitation of CVE-2026-0386 does not require user interaction, making it a significant risk.
What can attackers do by exploiting CVE-2026-0386?
By exploiting CVE-2026-0386, attackers can execute arbitrary code on systems running vulnerable Windows Deployment Services.