PULSEUnderground Intel

LIVE22signals / 24h

FEED

ransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technologyransomincransom reclama a FINANCIAMENTO LTDA · BR · Financial Servicesransomqilin reclama a MOA Architecture · SG · Professional Servicesransomqilin reclama a Joliet Public Schools District 86 · US · Educationransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technologyransomincransom reclama a FINANCIAMENTO LTDA · BR · Financial Servicesransomqilin reclama a MOA Architecture · SG · Professional Servicesransomqilin reclama a Joliet Public Schools District 86 · US · Education

CVE WatchOct 13, 2026

CVE-2026-85865

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

CVSS

5.5

Medium

EPSS

0.3%

p20

KEV

—

Exploit Today

6

0-100

Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-288

EPSS · 30d

Not enough EPSS history yet.

Technical description

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85865

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-110852—

——0n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignoring the server-generated identifier that is the URL's only unguessable component. Unauthenticated attackers can omit this identifier in requests to webhook, form, or MCP routes to execute workflows in unrelated projects under those projects' credentials.9h CVE-2026-890678.8 HIG

——0Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.4h CVE-2026-837875.5 MED

——6Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.15h CVE-2026-11013010.0 CRI

——14Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and the user-mutation handlers fail open for unauthenticated callers. Unauthenticated remote attackers can send a PUT request to /api/users/<id>.js to reset the admin's or any user's password and take over the account.15h CVE-2026-117318.8 HIG

——5An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings. This vulnerability may impact the confidentiality and integrity of management data and the availability of device-management functions.1d CVE-2026-196228.8 HIG

——8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.1d