Summary
Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?
This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.
According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires the attacker to be part of DnsAdmins group. As is best practice, regular validation and audits of administrative groups should be conducted.
Security updates
10.0.17763.9020 — https://support.microsoft.com/help/5099538
10.0.20348.5386 — https://support.microsoft.com/help/5099540
10.0.26100.33158 — https://support.microsoft.com/help/5099536
10.0.14393.9339 — https://support.microsoft.com/help/5099535
6.2.9200.26226 — https://support.microsoft.com/help/5099445
6.3.9600.23291 — https://support.microsoft.com/help/5099444
Vulnerabilities 1
-
Medium 6.8
Windows DNS Server Remote Code Execution Vulnerability
Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.
Revision history
-
#1
Information published.
References
-
CVE-2026-50426 Windows DNS Server Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50426
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss