Windows DHCP Server Security Feature Bypass Vulnerability
MonitorCVSS 5.5CVE-2026-83787Oct 13, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
What this means
What could happen
Could allow unauthorized modification of device settings or firmware
Who's at risk
Organizations in critical infrastructure using Microsoft equipment
How it could be exploited
Attacker would need local or console access to the device with basic access credentials. The attack is straightforward with no special conditions
Exploitability
Unlikely to be exploited — EPSS score 0.3%
Affected products (12)
12 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/1
Long-term hardening
0/1Exploitation assessment: Exploitation Less Likely. Apply the 2026-Oct security update.
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/cd9d43a1-8ee1-49ad-922a-e3fbd00545beGet OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.