← Database
CVE-2026-66302
CRITICAL
CVSS: 9.8
Published: 2026-09-08
Modified: 2026-09-16
Description
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
Affected Platforms
Microsoft Skype For Business Server Subscription EditionMicrosoft Skype For Business Server