CVE-2026-81964 | Microsoft Windows up to Server 2025 Windows Update Orchestrator Service hard-coded credentials

October 14, 2026 Yanac

A vulnerability described as problematic has been identified in Microsoft Windows up to Server 2025. Affected by this vulnerability is an unknown functionality of the component Windows Update Orchestrator Service. The manipulation results in hard-coded credentials.

This vulnerability is identified as CVE-2026-81964. The attack is only possible with local access. There is not any exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More