CVE-2026-65641: Critical severity vulnerability
Published Aug 26, 2026
·Updated
A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.
Event History
Aug 26, 2026
CVE Published
via MITRE·09:21 PM
Data Sourced
via MITRE·09:21 PM
DescriptionWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker must be able to reach the vulnerable service over the network and does not need to authenticate first. Successful exploitation can coerce SMB authentication from the service account.
2
Which identity could be exposed through exploitation?
The affected identity is the account under which the service runs. The provided information does not identify the product, affected versions, or whether the service uses a default account.