CVE-2026-69646
HighCVSS 8.3Summary
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
Risk Assessment
Risk includes impersonation of users or services, potentially leading to trust issues and further attacks. Attack requires access to the local network.
Recommendation
Apply security updates for Skype for Business. Restrict network access and monitor traffic for unusual patterns.
Other vulnerabilities in Skype for Business
See all- CVE-2026-66307High
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
- CVE-2026-66305High
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
- CVE-2026-66304High
Server-side request forgery (SSRF) in Skype for Business allows an unauthorized attacker to disclose information over a network.
- CVE-2026-66302Critical
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
- CVE-2024-20695Medium
A vulnerability in Skype for Business allows information disclosure.
Original NVD description (English source)
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.