CVE-2026-21249CWE-73

Windows NTLM Spoofing Vulnerability

Low · published February 10, 2026

CVSS v3.1
3.3
EPSS
11%
Percentile
96.0
In the wild
Unconfirmed
What it is

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.11441 · 96.0th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2026-02-10T17:51Z
EPSS history
Timeline
  • 10 FEB 17:51Z
    Windows NTLM Spoofing Vulnerability
    cvelistv5