PT-2025-42062 · Microsoft · Windows Smb Server+1

Published 2025-10-14 · Updated 2025-12-11 · CVE-2025-58726

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows versions (affected versions not specified)

Description An issue exists in the Windows SMB Server component related to improper access control. Exploitation of this issue can allow an attacker to elevate privileges over a network. This can be achieved through Kerberos reflection against unresolved Service Principal Names (Ghost SPNs). The vulnerability requires the presence of a Ghost SPN on the target system and the ability to register DNS records. Microsoft addressed this with a security update released in October 2025. The vulnerability allows for remote SYSTEM escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-13224

CVE-2025-58726

Affected Products

Windows

Windows Smb Server

References · 25

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-58726 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58726 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-58726 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58726 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13224 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58726 · Security Note
• https://reddit.com/r/CVEWatch/comments/1okqilw/top_10_trending_cves_31102025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1omei0a/top_10_trending_cves_02112025 · Reddit Post
• https://twitter.com/CveTodo/status/1978153834590486701 · Twitter Post
• https://vicarius.io/vsociety/posts/cve-2025-58726-detection-script-improper-access-control-affecting-smb-server-by-microsoft · Note
• https://twitter.com/vicariusltd/status/1989363444978700490 · Twitter Post
• https://twitter.com/CVEnew/status/1978171200192102786 · Twitter Post
• https://t.me/pentestingnews/70499 · Telegram Post
• https://reddit.com/r/HasambaShared/comments/1ol2dqk/ghost_spns_and_kerberos_reflection_lead_to_smb · Reddit Post
• https://twitter.com/0dayPublishing/status/1988259109448073313 · Twitter Post