{"id":"CVE-2026-88115","published":"2026-10-13T19:21:29.767","lastModified":"2026-10-17T04:17:08.190","description":"Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88115","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An out-of-bounds read vulnerability in Windows Server for NFS allows remote attackers to execute arbitrary code on the affected system. This occurs when processing NFS requests, potentially enabling attackers to gain full control over the server.","exploitability":"Exploitation requires a network-based attack with minimal preconditions, as the vulnerability affects an unauthenticated service that can be accessed from any network location.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on Windows Server systems running NFS services, potentially leading to complete server compromise and access to all shared resources.","remediation":"Disable NFS server functionality immediately or apply the latest Windows Update KB5049123 which contains the fix for this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","nfs","remote"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:01:57.042Z"}}