CVE-2026-0386CWE-284

Windows Deployment Services Remote Code Execution Vulnerability

High · published January 13, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
45.3
In the wild
Unconfirmed
What it is

⚡ An unauthorized attacker can execute code through Windows Deployment Services without breaking a sweat! Imagine a hacker pulling the strings from just the next office over. 😮 Think of it like a restaurant where a rogue diner can sneak into the kitchen and start cooking – nobody's stopping them, and the results could be disastrous for everyone! If exploited, this vulnerability allows an attacker to run malicious code on your network, potentially leading to full system compromise. It’s like giving the keys to the kingdom to someone who shouldn't even be on the guest list! 🔥

Put simply

Think of it like a restaurant where a rogue diner can sneak into the kitchen and start cooking – nobody's stopping them, and the results could be disastrous for everyone! CVE-2026-0386 is an improper access control vulnerability in Windows Deployment Services that permits unauthorized code execution from an adjacent network. This means a bad actor can manipulate system resources without proper credentials.

What to do

If exploited, this vulnerability allows an attacker to run malicious code on your network, potentially leading to full system compromise. It’s like giving the keys to the kingdom to someone who shouldn't even be on the guest list! 🔥 To secure your systems, immediately apply the latest patches from Microsoft for Windows Deployment Services, and review network segmentation to limit adjacent access. Regularly audit your access controls to ensure only authorized users have the keys they need! You’ve got this! By taking these steps, you’ll fortify your defenses and make your network a safer place. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00550 · 45.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-01-13T17:56Z
EPSS history
Timeline
  • 13 JAN 17:56Z
    Windows Deployment Services Remote Code Execution Vulnerability
    cvelistv5