Vulnerabilities
Windows SMB Server DoS Vulnerability (CVE‑2026‑70133) – Immediate Patch Required
An unbounded resource allocation flaw in Windows SMB Server lets remote attackers trigger a denial‑of‑service. The vulnerability affects all Windows Server editions that run SMB. Microsoft has released a patch; administrators should apply it immediately and consider disabling SMB where possible.
What happened
An unbounded resource allocation flaw in the Windows SMB Server component allows an unauthenticated remote attacker to trigger a denial‑of‑service by exhausting server resources. The bug resides in the way SMB requests are processed, with no limits or throttling applied.
Impact
All Windows Server editions that expose SMB (v1, v2, or v3) are vulnerable. A successful exploit can cause the SMB service to crash or become unresponsive, disrupting file and printer sharing and other SMB‑dependent services.
What to do
- Apply the latest Microsoft security update that addresses CVE‑2026‑70133.
- Verify that the patch has been installed on all SMB‑enabled servers.
- Consider disabling SMBv1 and limiting SMB traffic to trusted networks.
- Monitor SMB logs for anomalous request patterns and enforce rate‑limiting if possible.
Related vulnerabilities
CVE-2026-69572: Windows SMB Client Information Disclosure Vulnerability
A flaw in the Windows SMB client can leak sensitive data to local users. The issue is triggered by malformed SMB packets and affects Windows 10/11 and Server 2019/2022. Apply the latest MSRC update or patch to mitigate the risk.
Read briefing
CVE-2026-105008: Windows Schannel Spoofing Vulnerability – Immediate Patch Required
A new spoofing flaw in Windows Schannel (CVE‑2026‑105008) can allow attackers to impersonate a TLS server, potentially enabling man‑in‑the‑middle attacks. The vulnerability affects all Windows systems that use the Schannel stack. Apply the latest security updates and verify TLS configurations immediately.
Read briefing
StrongSwan Remote DoS Vulnerability (CVE‑2026‑78123) – Immediate Patching Required
A critical remote denial‑of‑service flaw has been discovered in StrongSwan VPN software, identified as CVE‑2026‑78123. The vulnerability allows attackers to crash the daemon on any system running a version older than 6.1.0, potentially taking networks offline. It is triggered by malformed IKE packets and can be mitigated by applying the vendor‑released patch. All affected deployments should update immediately.
Read briefing
Windows DHCP Server Denial of Service Vulnerability (CVE‑2026‑77886) – Immediate Patch Required
Microsoft has disclosed a denial‑of‑service flaw in the Windows DHCP Server that can be triggered by a crafted request, potentially disrupting network services. The issue affects all Windows Server editions that run the DHCP service. Administrators should apply the latest cumulative update and verify service stability.
Read briefing