SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-72964

MEDIUM · CVSS 5.5 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Windows Internet Connection Sharing (ICS) is vulnerable due to a lack of authentication for critical functions, enabling an authorized attacker to execute local tampering. This could lead to unauthorized modifications of network configurations or data interception. Organizations utilizing Windows ICS should prioritize addressing this vulnerability to mitigate potential local attack risks.

CVE
CVE-2026-72964
Severity
MEDIUM
CVSS
5.5
EPSS
0.29%
Windows

Original NVD Description

Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.