---
id: "CVE-2026-122475"
page: "https://infrastack.ai/live/CVE-2026-122475"
kind: "vulnerability"
aliases: ["CVE-2026-122475"]
title: "Windows Storage Spaces Controller: pointer flaw lets a network attacker run code"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "storage-spaces", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:20:37+00:00"
first_seen_at: "2026-11-10T19:25:11+00:00"
updated_at: "2026-11-10T19:27:43+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122475", "first_seen_at": "2026-11-10T19:25:11+00:00"}]
exploit_sources: []
---

# Windows Storage Spaces Controller: pointer flaw lets a network attacker run code

Link for people: https://infrastack.ai/live/CVE-2026-122475 (this .md is for agents)

Windows Storage Spaces Controller mishandles an untrusted pointer, letting an unauthorized attacker run code on the machine over the network. The sources rate it high, CVSS 8.8, and do not describe exploitation in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:11+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122475

## From the sources

Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_