NetSight
high8.0

CVE-2026-33826

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

Impact

Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network.

Affected products

VendorProductAffected versions
MicrosoftWindows Server 2012
Version r2
MicrosoftWindows Server 2016
before 10.0.14393.9060
MicrosoftWindows Server 2019
before 10.0.17763.8644
MicrosoftWindows Server 2022
before 10.0.20348.5020
MicrosoftWindows Server 2022 23h2
before 10.0.25398.2274
MicrosoftWindows Server 2025
before 10.0.26100.32690

Weakness classification

References