Skip to content
CodeAuditAgent

CVE-2026-26154

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

Weakness

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

Affected products

  • microsoft windows_server_2012
  • microsoft windows_server_2016
  • microsoft windows_server_2019
  • microsoft windows_server_2022
  • microsoft windows_server_2022_23h2
  • microsoft windows_server_2025

References

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.