CVE-2026-26151
Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network
CVSS
7.1
High
EPSS
0.8%
p57
KEV
—
Exploit Today
17
0-100
Published: Apr 14, 2026 · Last modified: Oct 26, 2026 · CWE-357
0.8%EPSS · 30 days0.8%
2026-09-282026-10-25
Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network.
- msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26151
- www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2026-26151-detection-script-spoofing-vulnerability-affecting-windows-remote-desktop
- www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2026-26151-mitigation-script-spoofing-vulnerability-affecting-windows-remote-desktop
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-585974.3 MED53.0%
——16Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.2dCVE-2026-477823.3 LOW2.7%
——1Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.96dCVE-2024-300585.4 MED33.4%
——10Microsoft Edge (Chromium-based) Spoofing Vulnerability99dCVE-2024-261884.3 MED56.9%
——17Microsoft Edge (Chromium-based) Spoofing Vulnerability78d