CVE-2026-69379 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7 HIGH	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Windows Releases

Platform

Version

Windows 11

23H2 (arm64, x64)	KB5122880
24H2 (arm64, x64)	KB5124008
25H2 (arm64, x64)	KB5124008
26H1 (arm64, x64)	KB5124012

Windows Server 2025

Server Core	KB5122871
Standard	KB5122871

Common Weakness Enumeration

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Vulnerability Media Exposure

[ENGLISH] Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days
Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities. [...]
Published: 2026-09-08T14:18:05-04:00

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69379