CVE-2026-105008CWE-290CWE-420

CVE-2026-105008

Critical · published October 13, 2026

CVSS v3.1

9.0

EPSS

Percentile

48.0

In the wild

Unconfirmed

What it is

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

The record

Technical detail

CVSS v3.1: 9.0 · CRITICAL
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00599 · 48.0th percentile
Weaknesses: CWE-290 · Authentication Bypass by Spoofing; CWE-420 · Unprotected Alternate Channel
Published: 2026-10-13T23:17Z

References (1)

EPSS history

Timeline