CVE-2026-62759

Analyzed Analyzed - Analysis Complete

Authentication Bypass via Spoofing in Windows Netlogon

Publication date: 2026-09-08

Last updated on: 2026-09-24

Assigner: Microsoft Corporation

Description

Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-24

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-62759

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_netlogon	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-290	This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

Executive Summary

This vulnerability is an authentication bypass by spoofing in Windows Netlogon. It allows an unauthorized attacker to perform spoofing over an adjacent network, potentially gaining unauthorized access to systems.

Impact Analysis

An attacker could exploit this to bypass authentication, gain unauthorized access to systems, and perform actions as a legitimate user. This could lead to data theft, system compromise, or further network infiltration.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for GDPR and HIPAA. Organizations may face penalties for failing to protect personal or health information.

Mitigation Strategies

Apply the latest security updates from Microsoft to patch the Windows Netlogon vulnerability. Ensure all systems are updated to the latest version to prevent spoofing attacks.

Hi! I’m here to help you understand CVE-2026-62759. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70