CVE-2026-96222 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.4 HIGH	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 46.56%

Windows Releases

Platform

Version

Windows 10

1607 (x64, x86)	KB5126868
1607	KB5127684
1809	KB5127666
1809	KB5127685
1809 (x64, x86)	KB5126651
21H2	KB5127683
21H2	KB5127689
22H2	KB5127683
22H2	KB5127689

Windows 11

23H2	KB5127692
24H2	KB5127690
25H2	KB5127690
26H1	KB5127691
26H1	KB5127696
26H2	KB5127694

Windows Server 2012

Standard	KB5127660
Standard	KB5127667
Standard	KB5127686

Windows Server 2012 R2

Server Core	KB5126836
Standard	KB5126836
Standard	KB5127664
Standard	KB5127668
Standard	KB5127688

Windows Server 2016

Server Core	KB5126868
Standard	KB5126868
Standard	KB5127684

Windows Server 2019

Server Core	KB5126651
Standard	KB5126651
Standard	KB5127666
Standard	KB5127685

Windows Server 2022

Server Core	KB5126655
Standard	KB5126655
Standard	KB5127687
Standard	KB5127693

Windows Server 2025

Server Core	KB5126646
Standard	KB5126646
Standard	KB5127690

Common Weakness Enumeration

CWE-295 - Improper Certificate Validation
The software does not validate, or incorrectly validates, a certificate.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96222