CVE-2026-66302
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Summary
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Skype for Business Server 2015 CU13 | 9319.0 < 6.0.9319.885 | affected |
| Microsoft | Skype for Business Server 2019 CU8 | 2046.0 < 7.0.2046.569 | affected |
| Microsoft | Skype for Business Server Subscription Edition CU1 | 2046.0 < 7.0.2046.879 | affected |
Weaknesses
- CWE-73: CWE-73: External Control of File Name or Path
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.