Skip to content
Critical Windows DNS RCE Vulnerability CVE-2026-69730 Disclosed

Critical Windows DNS RCE Vulnerability CVE-2026-69730 Disclosed

First seen 12 Sep 2026, 00:11 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 12, 2026 at 08:16 UTC
  • •CVE-2026-69730 is a critical RCE vulnerability in Windows DNS Server with CVSS 9.8.
  • •It allows unauthenticated code execution, primarily affecting domain controllers.
  • •Microsoft released a patch on September 8, 2026, amid a massive Patch Tuesday update.

CVE-2026-69730 is a critical unauthenticated remote code execution vulnerability in Windows DNS Server, rated CVSS 9.8. It allows attackers to execute code without user interaction, primarily affecting domain controllers in Active Directory networks. This vulnerability is being compared to the infamous SigRed (CVE-2020-1350), which went undetected for 17 years. As of now, there are no known exploits in the wild, but Microsoft has warned that exploitation is more likely. The vulnerability was patched on September 8, 2026, as part of a significant Patch Tuesday update that addressed 974 CVEs, including 20 that are wormable. Organizations are urged to apply the patch immediately to mitigate potential risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2020-03-11
Public exploit for CVE-2020-0796 released
A proof-of-concept exploit appeared on GitHub, lowering the barrier for opportunistic attackers.
GitHub
2020-03-12
First public PoC for CVE-2020-1350
The first proof-of-concept code for CVE-2020-1350 was made publicly available.
www.tenable.com
2020-07-14
CVE-2020-1350 (SigRed) published
Microsoft disclosed CVE-2020-1350, a critical RCE vulnerability in Windows DNS Server, rated CVSS 10.0.
www.tenable.com
2021-11-03
CVE-2020-1350 added to CISA KEV
CISA added CVE-2020-1350 to its Known Exploited Vulnerabilities catalog due to active exploitation.
www.tenable.com
2026-09-08
CVE-2026-69730 patched
Microsoft released a patch for CVE-2026-69730 as part of a major update addressing 974 CVEs.
Xhack

More articles in this cluster (2)

Following this threat?

Track CVE-2020-0796 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (20)

1 / 4