---
id: "CVE-2026-118736"
page: "https://infrastack.ai/live/CVE-2026-118736"
kind: "vulnerability"
aliases: ["CVE-2026-118736"]
title: "Windows Network File System: access control flaw leaks information locally"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "network-file-system", "windows"]
not_affected_if: ["no-nfs-role"]
published_at: "2026-11-10T19:19:50+00:00"
first_seen_at: "2026-11-10T19:24:55+00:00"
updated_at: "2026-11-10T20:00:41+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118736", "first_seen_at": "2026-11-10T19:24:55+00:00"}]
exploit_sources: []
---

# Windows Network File System: access control flaw leaks information locally

Link for people: https://infrastack.ai/live/CVE-2026-118736 (this .md is for agents)

Windows Network File System has an improper access control flaw that lets an authorized local user read information they should not see. The sources give no further detail on what data is exposed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118736

## From the sources

Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_