CVE Vulnerabilities

CVE-2026-105008

Unprotected Alternate Channel

Published: Oct 13, 2026 | Modified: Oct 27, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

Weakness

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Affected Software

NameVendorStart VersionEnd Version
Windows_10_1607Microsoft*10.0.14393.9612 (excluding)
Windows_10_1809Microsoft*10.0.17763.9376 (excluding)
Windows_10_21h2Microsoft*10.0.19044.7807 (excluding)
Windows_10_22h2Microsoft*10.0.19045.7807 (excluding)
Windows_11_23h2Microsoft*10.0.22631.7652 (excluding)
Windows_11_24h2Microsoft*10.0.26100.9711 (excluding)
Windows_11_25h2Microsoft*10.0.26200.9711 (excluding)
Windows_11_26h1Microsoft*10.0.28000.3231 (excluding)
Windows_11_26h2Microsoft*10.0.26300.9711 (excluding)
Windows_server_2012Microsoft- (including)- (including)
Windows_server_2012Microsoftr2 (including)r2 (including)
Windows_server_2016Microsoft*10.0.14393.9612 (excluding)
Windows_server_2019Microsoft*10.0.17763.9376 (excluding)
Windows_server_2022Microsoft*10.0.20348.5761 (excluding)
Windows_server_2025Microsoft*10.0.26100.33650 (excluding)

Potential Mitigations

References