Vulnerabilities
CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability
Microsoft has identified a remote code execution flaw in the Windows DHCP client that can be triggered by malicious DHCP servers. The vulnerability allows attackers to run arbitrary code on affected hosts. Defenders should verify patch status, monitor DHCP traffic, and apply mitigations.
What happened
Microsoft disclosed CVE-2026-54128, a remote code execution vulnerability in the Windows DHCP client. A malicious DHCP server can send specially crafted packets that trigger the flaw, enabling code execution on the client.
Impact
All Windows systems that use the default DHCP client are potentially affected. Attackers who can reach the client over the network can execute arbitrary code with the privileges of the DHCP client process.
Mitigation
Apply the latest cumulative update that addresses CVE-2026-54128. If a patch is not yet available, consider disabling the DHCP client on critical hosts or restricting DHCP traffic to trusted servers.
Monitoring
Inspect DHCP logs for unusual packet patterns, and watch for signs of code execution or privilege escalation. Use network segmentation to limit exposure of DHCP services.
Related vulnerabilities
CVE-2026-61363: Remote Desktop Client Remote Code Execution Vulnerability
A critical RCE flaw in Windows Remote Desktop Client (CVE-2026-61363) allows attackers to execute arbitrary code via crafted RDP traffic. All Windows 10/11 and Windows Server 2022 systems are affected. Apply the latest security update and enforce NLA or VPN to mitigate.
Read briefing
OpenOffice Versions <4.1.17 Vulnerable to Remote Code Execution (CVE‑2026‑59265, CVE‑2026‑63277)
Multiple CVEs have been identified in OpenOffice versions older than 4.1.17 that enable remote code execution. The flaws allow an attacker to trigger arbitrary code on a target system via crafted documents. Defenders must apply the vendor’s patches immediately or upgrade to a supported release.
Read briefing
Windows DHCP Server Security Feature Bypass Vulnerability (CVE-2026-83787)
A local authorized attacker can bypass a built‑in security feature in Windows DHCP Server due to insufficient data authenticity verification. The flaw is present in all Windows Server DHCP services and can be mitigated by applying the latest Microsoft patch and tightening local admin controls.
Read briefing
CVE-2026-69572: Windows SMB Client Information Disclosure Vulnerability
A flaw in the Windows SMB client can leak sensitive data to local users. The issue is triggered by malformed SMB packets and affects Windows 10/11 and Server 2019/2022. Apply the latest MSRC update or patch to mitigate the risk.
Read briefing