CVE-2026-97788 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 51.8%

Windows Releases

Platform

Version

Windows 10

1607	KB5127684
1607 (x64, x86)	KB5126868
1809	KB5127685
1809	KB5127666
1809 (x64, x86)	KB5126651
21H2	KB5127683
21H2	KB5127689
21H2 (arm64, x64, x86)	KB5126657
22H2	KB5127683
22H2	KB5127689
22H2 (arm64, x64, x86)	KB5126657

Windows 11

23H2	KB5127692
23H2 (arm64, x64)	KB5126653
24H2	KB5127690
24H2 (arm64, x64)	KB5127648
25H2	KB5127690
25H2 (arm64, x64)	KB5127648
26H1	KB5127691
26H1	KB5127696
26H1 (arm64, x64)	KB5127646
26H2	KB5127694
26H2 (arm64, x64)	KB5127648

Windows Server 2012

Server Core	KB5126835
Standard	KB5126835
Standard	KB5127660
Standard	KB5127667
Standard	KB5127686

Windows Server 2012 R2

Server Core	KB5126836
Standard	KB5126836
Standard	KB5127664
Standard	KB5127668
Standard	KB5127688

Windows Server 2016

Server Core	KB5126868
Standard	KB5126868
Standard	KB5127684

Windows Server 2019

Server Core	KB5126651
Standard	KB5126651
Standard	KB5127666
Standard	KB5127685

Windows Server 2022

Server Core	KB5126655
Standard	KB5126655
Standard	KB5127687
Standard	KB5127693

Windows Server 2025

Server Core	KB5126646
Standard	KB5126646
Standard	KB5127690

Common Weakness Enumeration

CWE-203 - Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97788