CyberICT

CVE-2026-26154

Microsoft · Published April 14, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

Windows Server Update Service (WSUS) Tampering Vulnerability. Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

Affected Products

  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C