CVE-2026-105560 · Infrastructure
NO FIX YET
A flaw in the Windows DHCP Server service lets an authorized attacker release an invalid pointer or reference over the network. The sources say this allows code execution on the server.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only Windows servers running the DHCP Server role are exposed. The attacker must already be authorized on the network, so servers without the role can skip it. The sources do not list affected Windows builds or a fixed version.
Not affected if dhcp-client-only, dhcp-role-not-installed
Who cares dhcp, windows, windows-server
Get-WindowsFeature DHCP).No fix yet, per the sources.
Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.