CVE-2026-50328
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
An unhandled exception in Windows Server Update Service (WSUS) allows an unauthorized attacker to perform tampering over a network. This vulnerability could compromise the integrity of updates.
Risk Assessment
An attacker could modify updates or WSUS configuration, potentially delivering malware to systems within the organization.
Recommendation
Apply the latest security updates from Microsoft for Windows Server Update Service. Restrict network access to the WSUS server to trusted hosts only.
Other vulnerabilities in Windows Server Update Service
See all- CVE-2026-50444High
Missing authentication for a critical function in Windows Server Update Service (WSUS) allows an authorized attacker to elevate privileges over a network.
- CVE-2026-20856High
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.