Security feed

24 October 2026

Unrated

Microsoft SMBv1 Server Remote Code Execution Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited24 Oct 2026, 21:22 UTC

The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets. CISA required action: Apply updates per vendor instructions.

Products: SMBv1 serverCVEs: CVE-2017-0148

Unrated

Microsoft Windows SMBv1 Information Disclosure Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited24 Oct 2026, 21:20 UTC

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet. CISA required action: Apply updates per vendor instructions.

Products: SMBv1 serverCVEs: CVE-2017-0147