CVE-2026-56649CWE-362CWE-416

Windows Network File System Remote Code Execution Vulnerability

Medium · published July 14, 2026

CVSS v3.1
5.9
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00699 · 52.6th percentile
Weaknesses
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'); CWE-416 · Use After Free
Published
2026-07-14T17:09Z
EPSS history
Timeline
  • 14 JUL 17:09Z
    Windows Network File System Remote Code Execution Vulnerability
    cvelistv5