CVE-2026-69676Patch(microsoft / windows_10_1607)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-294

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 2 mentions (2026-09-09); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016

2 versions affected across 13 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-09: 2Mentions · 2026-10-10: 1Patch / Workaround · 2026-09-09: 2Patch / Workaround · 2026-10-10: 1Technical Details · 2026-09-09: 1Technical Details · 2026-10-10: 109-0910-10
Signal classification1 categories
Patch
3100.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-092
Patch2
2026-10-101
Patch1
Full discourse3 posts
  • SonicWall@SonicWall
    Patch

    Two RCEs to patch now from this month's Patch Tuesday: Windows Kerberos (CVE-2026-69676) Windows HTTP Print Provider (CVE-2026-69623) SonicWall IPS signatures are live for both. Don't wait on these. https://bit.ly/3T0IOz1 #SonicWallAlerts https://t.co/hbl1sL9Qsv

    Post summary

    The post highlights two RCE vulnerabilities (CVE-2026-69676 and CVE-2026-69623) and urges immediate patching, noting that SonicWall IPS signatures are active.

    01010368
    29.2K followersView on X
  • Venkata Satish Guttula 🛰️@snakeyesV1
    Patch

    News: Windows Kerberos CVE-2026-69676 (CVSS 8.8) lets a low-priv domain user replay a crafted auth request and run code on a DC; Exploitation More Likely; patch DCs now. https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-september-2026/

    Post summary

    The article describes the Windows Kerberos CVE-2026-69676 vulnerability (CVSS 8.8), noting that low‑privileged users can replay crafted authentication requests to run code on domain controllers, and it confirms that DCs have been patched.

    10000130
    3.0K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-69676 (CVSS 8.8) Windows Kerberos authentication bypass via capture-replay attack. Authorized attackers can execute code remotely over network. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/lmRGmfh5in

    Post summary

    The text describes a high-severity Windows Kerberos authentication bypass and urges readers to patch immediately. It does not report active exploitation or provide a PoC or named exploit tool.

    0000035
    150 followersView on X
CPE platform detail24 entries

24 of 24 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_23h2--arm64
OSmicrosoftwindows_11_23h2--x64
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025---

Explore more