PT-2026-2730 · Microsoft · Windows Ntlm+1

Bodyrotx + 1 · Publicado 2026-01-13 · Atualizado 2026-01-13 · CVE-2026-20925

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows NTLM (affected versions not specified)

Description An issue exists within Windows NTLM that allows for external control of file names or paths. This can enable an unauthorized attacker to perform spoofing over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-73

Identificadores relacionados

BDU:2026-00431

CVE-2026-20925

Produtos afetados

Windows

Windows Ntlm

Referências · 7

• https://bdu.fstec.ru/vul/2026-00431 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-20925 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20925 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-20925 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20925 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-20925 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2011181545776898141 · Publicação no Twitter