{"id":"CVE-2026-105557","kind":"vulnerability","aliases":["CVE-2026-105557"],"related":[],"title":"Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an…","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.","summary":null,"severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":[],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:17:58+00:00","first_seen_at":"2026-11-10T19:24:19+00:00","triaged_at":null,"updated_at":"2026-11-10T19:39:26+00:00","category":null,"confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-105557':18A,21A '-2026':17A,20A 'allow':15A,36C 'attack':39C 'control':9A,30C 'cve':16A,19A 'dhcp':13A,34C 'disclos':41C 'exposur':1A,22C 'inform':5A,26C,42C 'network':45C 'sensit':3A,24C 'server':14A,35C 'sphere':10A,31C 'system':4A,25C 'unauthor':8A,29C,38C 'window':12A,33C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium"],"campaign_type":null,"search_a":"'-105557':18A,21A '-2026':17A,20A 'allow':15A 'control':9A 'cve':16A,19A 'dhcp':13A 'exposur':1A 'inform':5A 'sensit':3A 'server':14A 'sphere':10A 'system':4A 'unauthor':8A 'window':12A","search_b":"","search_c":"'allow':36C 'attack':39C 'control':30C 'dhcp':34C 'disclos':41C 'exposur':22C 'inform':26C,42C 'network':45C 'sensit':24C 'server':35C 'sphere':31C 'system':25C 'unauthor':29C,38C 'window':33C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105557","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105557","severity":null,"published_at":"2026-11-10T19:17:58+00:00","modified_at":"2026-11-10T19:17:58+00:00","first_seen_at":"2026-11-10T19:24:19+00:00","fetched_at":"2026-11-10T19:24:19+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}