Microsoft Windows: Microsoft Windows SMB Remote Code Execution Vulnerability

Who cares

ransomware, self-hosted, smb, windows

Not affected if

patched-ms17-010, patched-windows, smbv1-disabled, windows-10-1709-or-later-default, windows-server-2019-or-later

1. CISA KEV2026-10-23 19:11 UTC · published 2022-03-25 00:00 UTC · CVE-2017-0146
2. EPSS2026-10-23 19:13 UTC · CVE-2017-0146
3. InfraStack analyst2026-10-23 21:25 UTC · published 2026-10-23 21:25 UTC
   “Read MS17-010 bulletin (KB4013389) and Microsoft SMBv1 detect/disable page; builds and KBs from bulletin table (page text truncated after Server Core rows, so later rows not read). No PoC link or X check done; exploited status from KEV triage.”
4. NVD2026-10-23 21:57 UTC · published 2017-03-17 00:59 UTC · CVE-2017-0146

Each row is the first time that source carried this signal. The analyst’s rows are its own findings.

• CISA KEV: CVE-2017-0146 · 10-23 19:11
• EPSS: CVE-2017-0146 · 10-23 19:13
• NVD: CVE-2017-0146 · 10-23 21:57
• Microsoft Security Bulletin MS17-010Advisory · InfraStack analyst
• Detect, enable, and disable SMBv1, SMBv2, SMBv3 in WindowsMitigation · InfraStack analyst

This page as .md · .json · in your agent: get_signal("CVE-2017-0146")

CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.