CVE WatchSep 24, 2026

CVE-2025-26633

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

CVSS

7.0

High

EPSS

30.4%

p98

KEV

YES

Mar 11, 2025

Exploit Today

0-100

Published: Mar 11, 2025 · Last modified: Sep 24, 2026 · CWE-707

EPSS · 30d

30.4%EPSS · 30 days30.4%

2026-09-182026-10-15

KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

Added to KEV

Mar 11, 2025

Remediate by

Apr 1, 2025

Known ransomware use

Yes

Summary description

Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633

Technical description

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-969518.8 HIG

74.0%

KEV—72Microsoft Windows Command Injection Vulnerability7h CVE-2026-762849.8 CRI

24.5%

——7As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76284 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.6h CVE-2026-764999.8 CRI

21.9%

——7As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76499 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.  8d CVE-2026-764538.8 HIG

25.3%

——8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76453 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.8d CVE-2026-971827.3 HIG

29.8%

——9A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such manipulation leads to improper neutralization. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.22d CVE-2026-203309.9 CRI

25.3%

——8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.   The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.28d