{"id":"CVE-2026-113818","kind":"vulnerability","aliases":["CVE-2026-113818"],"related":[],"title":"Windows Deployment Services: path traversal leaks files to authorized users","description":"Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.","summary":"Windows Deployment Services has a relative path traversal flaw that lets an authorized attacker read information over the network. The attacker can reach files outside the intended directory, but the sources do not say which files or how much data.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","wds","windows","windows-server"],"not_affected_if":["wds-not-enabled"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:01+00:00","first_seen_at":"2026-11-10T19:24:41+00:00","triaged_at":"2026-11-10T19:57:55+00:00","updated_at":"2026-11-10T19:57:55+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:57:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Deployment Services: path traversal leaks files to authorized users","impact":"low","summary":"Windows Deployment Services has a relative path traversal flaw that lets an authorized attacker read information over the network. The attacker can reach files outside the intended directory, but the sources do not say which files or how much data.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","windows-server","wds"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"authorized attacker reads files outside the intended directory","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-113818 for affected versions, the fixed build and any mitigation.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["wds-not-enabled"],"who_is_affected":"Organisations that run Windows Deployment Services servers to deploy Windows images on their network. Systems without WDS enabled are not affected. The sources do not state which versions are vulnerable or which configurations are exposed.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000665,"input_tokens":4485,"output_tokens":433,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-113818':13A,16A '-2026':12A,15A 'allow':70C 'attack':36B,43B,73C 'author':9A,35B,72C 'cve':11A,14A 'data':62B 'deploy':2A,24B,68C 'directori':50B 'disclos':75C 'file':7A,46B,58B 'flaw':31B 'inform':38B,76C 'infrastructur':17B 'intend':49B 'leak':6A 'let':33B 'much':61B 'network':41B,79C 'outsid':47B 'path':4A,29B,64C 'reach':45B 'read':37B 'relat':28B,63C 'say':56B 'server':22B 'servic':3A,25B,69C 'sourc':53B 'travers':5A,30B,65C 'user':10A 'wds':18B 'window':1A,19B,21B,23B,67C 'windows-serv':20B","nicknames":[],"mitigations":[],"who_affected":"Organisations that run Windows Deployment Services servers to deploy Windows images on their network. Systems without WDS enabled are not affected. The sources do not state which versions are vulnerable or which configurations are exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","wds","windows","windowsserver"],"campaign_type":null,"search_a":"'-113818':13A,16A '-2026':12A,15A 'author':9A 'cve':11A,14A 'deploy':2A 'file':7A 'leak':6A 'path':4A 'servic':3A 'travers':5A 'user':10A 'window':1A","search_b":"'attack':36B,43B 'author':35B 'data':62B 'deploy':24B 'directori':50B 'file':46B,58B 'flaw':31B 'inform':38B 'infrastructur':17B 'intend':49B 'let':33B 'much':61B 'network':41B 'outsid':47B 'path':29B 'reach':45B 'read':37B 'relat':28B 'say':56B 'server':22B 'servic':25B 'sourc':53B 'travers':30B 'wds':18B 'window':19B,21B,23B 'windows-serv':20B","search_c":"'allow':70C 'attack':73C 'author':72C 'deploy':68C 'disclos':75C 'inform':76C 'network':79C 'path':64C 'relat':63C 'servic':69C 'travers':65C 'window':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:01+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113818","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113818","severity":null,"published_at":"2026-11-10T19:19:01+00:00","modified_at":"2026-11-10T19:19:01+00:00","first_seen_at":"2026-11-10T19:24:41+00:00","fetched_at":"2026-11-10T19:24:41+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}