---
id: "CVE-2026-113825"
page: "https://infrastack.ai/live/CVE-2026-113825"
kind: "vulnerability"
aliases: ["CVE-2026-113825"]
title: "Windows SMB Server: race condition lets an authorized attacker run code"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["file-server", "infrastructure", "smb", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:19:04+00:00"
first_seen_at: "2026-11-10T19:24:42+00:00"
updated_at: "2026-11-10T19:45:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113825", "first_seen_at": "2026-11-10T19:24:42+00:00"}]
exploit_sources: []
---

# Windows SMB Server: race condition lets an authorized attacker run code

Link for people: https://infrastack.ai/live/CVE-2026-113825 (this .md is for agents)

A race condition in the Windows SMB Server network transport driver (srvnet.sys) lets an authorized attacker execute code over the network. The sources describe it only at this level, with no affected version range or fix listed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:42+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113825

## From the sources

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server Network Transport Driver (srvnet.sys) allows an authorized attacker to execute code over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_