Uncaught Exception in Windows iSCSI Target Service Allows DoS

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: Microsoft Corporation

Description

Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-08

Generated

2026-09-09

AI Q&A

2026-09-09

EPSS Evaluated

N/A

NVD

CVE-2026-69839

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	iscsi_target_service	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-248	An exception is thrown from a function, but it is not caught.

Attack-Flow Graph

Executive Summary

This vulnerability involves an uncaught exception in the Windows iSCSI Target Service. An authorized attacker can exploit this to cause a denial of service over a network by crashing the service.

Impact Analysis

If exploited, this vulnerability could disrupt access to iSCSI storage resources, leading to service outages and potential data unavailability for users relying on the service.

Mitigation Strategies

Apply the latest security updates from Microsoft to patch the Windows iSCSI Target Service. Disable the iSCSI Target Service if not in use to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-69839. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70