← Database

CVE-2026-73025

CRITICAL CVSS: 9.8 Published: 2026-09-08 Modified: 2026-09-17

Description

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2025Microsoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows 10 1607

Weakness Type

CWE-1390

References