---
id: "CVE-2026-113773"
page: "https://infrastack.ai/live/CVE-2026-113773"
kind: "vulnerability"
aliases: ["CVE-2026-113773"]
title: "Windows DHCP Server: access control flaw allows network spoofing by attackers"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "self-hosted", "windows", "windows-dhcp-server"]
not_affected_if: ["no-windows-dhcp-server"]
published_at: "2026-11-10T19:18:58+00:00"
first_seen_at: "2026-11-10T19:24:41+00:00"
updated_at: "2026-11-10T20:02:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113773", "first_seen_at": "2026-11-10T19:24:41+00:00"}]
exploit_sources: []
---

# Windows DHCP Server: access control flaw allows network spoofing by attackers

Link for people: https://infrastack.ai/live/CVE-2026-113773 (this .md is for agents)

Windows DHCP Server has an improper access control flaw that lets an unauthorized attacker on the network perform spoofing. The sources do not describe the exact spoofed traffic or the full impact beyond that.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the DHCP Server role is installed on the Windows machine (unknown exact command from sources).
- Confirm the Windows Server build against Microsoft's security update guide for this CVE (unknown from sources).

## Timeline

- 2026-11-10T19:24:41+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113773

## From the sources

Improper access control in Windows DHCP Server allows an unauthorized attacker to perform spoofing over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_