Back Cybersecuritynews

Microsoft to Block Windows 11 and Server 2025 Automated Installation After Critical RCE Vulnerability

Cybersecuritynews •Guru Baran • March 16, 2026

Microsoft has announced a two-phase plan to disable the hands-free deployment feature in Windows Deployment Services (WDS) following the discovery of a critical remote code execution (RCE) vulnerability tracked as CVE-2026-0386. The flaw, rooted in improper access control, allows an unauthenticated attacker on an adjacent network to intercept sensitive configuration files and execute arbitrary code […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft to Disable Hands-Free Deployment Due to Critical RCE Vulnerability Microsoft is implementing a two-phase plan to disable the hands-free deployment feature in Windows Deployment Services (WDS) due to a critical remote code execution (RCE) vulnerability, CVE-2026-0386, published on January 13, 2026. This vulnerability allows unauthorized attackers on adjacent networks to intercept sensitive configuration files, leading to potential credential theft and arbitrary code execution. The first phase began in January 2026, advising administrators to block unauthenticated access to Unattend.xml files. In the upcoming second phase, hands-free deployment will be fully disabled by default. The change affects Windows 11 and Server 2025 installations that utilize WDS for automated deployments. Microsoft has clarified that Microsoft Configuration Manager is not impacted by this vulnerability. If no action is taken by April 2026, the hands-free deployment feature will be blocked automatically in the April security update. This move is part of Microsoft's broader efforts to enhance security in their deployment workflows. 3 sources 73

Extracted Entities

Microsoft to Block Windows 11 and Server 2025 Automated Installation After Critical RCE Vulnerability

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)