{"id":"CVE-2026-105008","published":"2026-10-13T19:17:57.093","lastModified":"2026-10-16T17:17:22.427","description":"No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.","cvssScore":9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-420","CWE-290"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105008","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers to spoof network connections through Windows Schannel, enabling unauthorized impersonation of legitimate services or users. The flaw is critical because it can lead to man-in-the-middle attacks and unauthorized access to sensitive systems.","exploitability":"Exploitation requires a network position to intercept and manipulate TLS handshakes, making it moderately difficult but achievable with network-level access.","blast_radius":"If exploited, this vulnerability could allow attackers to impersonate any service or user that relies on Windows Schannel for secure communications, potentially affecting all networked applications using TLS connections.","remediation":"No fixed version is published. Disable Schannel-based authentication where possible or restrict access to affected services.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["spoofing","tls","schannel","network"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:49:11.523Z"}}