CVE-2026-85865: Windows DHCP Server Security Feature Bypass Vulnerability
Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
Other sources
Windows DHCP Server Security Feature Bypass Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9612Patch KB5126868 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26434Patch KB5126835 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23470Patch KB5126836 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9376Patch KB5126651 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33650Patch KB5126646 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5761Patch KB5126655
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must already be authorized and have local access to an affected Windows system running the DHCP Server component. The available information does not indicate that remote unauthenticated attackers can exploit it.
What is the likely security impact?
Successful exploitation allows an authorized local attacker to bypass a security feature and affect integrity. The provided scoring information indicates no confidentiality or availability impact.
Which systems should be triaged first?
Prioritize systems that run Windows DHCP Server on the listed Windows Server versions, and any listed Windows 10 systems where the DHCP Server component is installed. Exposure depends on the DHCP Server role or component being present, not merely on the operating system version.