Advisory severityMedium6.5Vendor: HighMicrosoft Server Updated

Medium [CVE-2026-70119] Windows DNS Remote Code Execution Vulnerability

This medium-severity Microsoft Server advisory covers CVE-2026-70119 affecting Windows Server 2022, Windows Server 2025.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-70119 Source published Oct 13, 2026Source updated Oct 13, 2026

VulniPulse record published Oct 13, 2026Record updated Oct 13, 2026

CVE-2026-70119

Affected products & platforms

Microsoft ServerWindows Server

Open source advisory

Android app · Google Play

Monitor future Microsoft Server CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Windows DNS Remote Code Execution Vulnerability

Affected products named by the advisory: Windows Server 2022; Windows Server 2025.

Affected versions

Windows Server 2022 10.0.20348.0 before 10.0.20348.5761
Windows Server 2025 10.0.26100.0 before 10.0.26100.33650
Windows Server 2025 (Server Core installation) 10.0.26100.0 before 10.0.26100.33650

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Fixed versions

KB5126655 (build 10.0.20348.5761)
KB5126646 (build 10.0.26100.33650)

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Install the applicable security update for your platform: KB5126655, KB5126646 (see the Microsoft Update Catalog).

Official advisory · high-confidence parse· fetched 1 day ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.