SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-49800

HIGH · CVSS 7.8 EPSS 2.11%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

An integer overflow vulnerability in the Windows Web Proxy Auto-Discovery Protocol (WPAD) allows authorized attackers to escalate privileges on affected Windows systems. This high-severity flaw poses a significant risk, enabling attackers to gain unauthorized access to sensitive resources. Organizations using Windows should prioritize patching this vulnerability to mitigate potential exploitation.

CVE
CVE-2026-49800
Severity
HIGH
CVSS
7.8
EPSS
2.11%
Windows

Original NVD Description

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-87654 CRITICAL CVE-2026-87653 MEDIUM CVE-2026-87648 HIGH CVE-2026-87644 HIGH CVE-2026-87621 CRITICAL CVE-2026-87618 HIGH