tag
Ntlm-Relay
Critical
Windows Server 2025 Local NTLM Reflection LPE via SMB Arbitrary Port + PetitPotam (CVE-2026-24294)
CVE-2026-24294 (Microsoft Security Response Center)·
Windows Server 2025 (SMB client "arbitrary TCP port" feature)
patched
Critical
Windows Kerberos Reflection via Unicode SPN Normalization Bypass (CVE-2026-26128)
CVE-2026-26128·
Windows Active Directory (DnsCache SPN resolution / Kerberos authentication)
unpatched