Skip to content
OpenAdvisories
High MSRC-CVE-2026-59124 1 CVE

Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

Published Aug 11, 2026 · Updated Oct 9, 2026 · Revision 3

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
An attacker could exploit this vulnerability by submitting a specially crafted payload to an affected service that deserializes untrusted data. Successful exploitation could allow the attacker to execute code on the target system.

Security updates
6.3.8359 — https://github.com/Azure/hpcpack/blob/master/CHANGELOG.md#hpc-pack-2019-update-3-qfe-kb5124659-638359---8102026

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-59124

    Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

    Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

    Microsoft Microsoft HPC Pack 2019

Revision history

  1. #3

    Updated an acknowledgement. This is an informational change only.

  2. #2

    Corrected the listed software in the Security Updates table. Microsoft recommends installing the security update as soon as possible.

  3. #1

    Information published.

References