CVE-2026-70229 | Tenable®

www.tenable.com • October 14, 2026

Share: View original

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Published : 2026-10-13

Vector : CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2026-70229 in Active Directory Requires Immediate Patching CVE-2026-70229 is a critical vulnerability in Windows Active Directory Domain Services that allows unauthenticated attackers to execute arbitrary code by sending specially crafted packets over the network. The flaw, rated CVSS 8.1, is due to incorrect authorization (CWE-863) and affects a wide range of systems, including Windows Server 2012 through 2025 and Windows 10 and 11 versions. While exploitation has not been publicly disclosed, Microsoft assesses it as 'Exploitation More Likely.' The vulnerability was published on October 13, 2026, alongside several others, including CVE-2026-105016, which has a higher CVSS score of 9.8. The October 2026 security update includes fixes for this flaw, and administrators are urged to apply the patches promptly to mitigate risks. 3 sources 61

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

CWE Weaknesses (1)

CWE-287 - Improper Authentication