CVE-2026-20849 | Microsoft Windows up to Server 2025 Kerberos reliance on untrusted inputs in a security decision

January 13, 2026 Yanac

A vulnerability was found in Microsoft Windows. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Kerberos. Executing a manipulation can lead to reliance on untrusted inputs in a security decision.

This vulnerability is registered as CVE-2026-20849. It is possible to launch the attack remotely. No exploit is available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More