{"id":"CVE-2026-69521","published":"2026-10-13T19:18:55.697","lastModified":"2026-10-13T22:17:41.083","description":"Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-190"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69521","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A Windows iSCSI integer overflow vulnerability allows remote attackers to execute arbitrary code when handling iSCSI traffic. This occurs due to improper handling of integer values during iSCSI operations, potentially leading to memory corruption and code execution.","exploitability":"Exploitation requires a network-based attack against an iSCSI target with minimal preconditions, making it moderately difficult to exploit but highly impactful once successful.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on affected Windows systems with iSCSI functionality, potentially leading to full system compromise and data exfiltration.","remediation":"Apply the latest Windows security updates that include fixes for this iSCSI integer overflow vulnerability, specifically targeting Windows Server 2019 and Windows 10/11 versions with iSCSI initiator or target components.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","iscsi","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:54:13.924Z"}}