CVE-2026-66302

Skype for Business is vulnerable to external control of file names or paths, enabling unauthorized attackers to execute arbitrary code remotely. This critical vulnerability poses a significant risk to the integrity and confidentiality of communications within the application. Organizations using Skype for Business should prioritize immediate remediation to mitigate potential exploitation.