CVE-2026-25177 - Vulnerability Analysis

Overview

Active Directory Domain Services contains a broken access control vulnerability caused by improper restriction of names for files and other resources, letting authorized attackers elevate privileges over a network, exploit requires attacker authorization.

Severity & Score

Impact

Authorized attackers can elevate their privileges over the network, potentially gaining unauthorized access or control.

Mitigation

Update to the latest version with security patches.

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25177

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner