Main
Vulnerability Database
Exploits
ID:13070 - Exploit for Improper access control in Microsoft products - CVE-2026-20929
ID:13070 - Exploit for Improper access control in Microsoft products - CVE-2026-20929
Published: September 9, 2026
Vulnerability identifier: #VU121231
Vulnerability risk: Medium
CVE-ID: CVE-2026-20929
CWE-ID: CWE-284
Exploitation vector: Remote access
Vulnerable software:
Microsoft Internet Information Services (IIS)
Microsoft Windows
Windows Server
Microsoft Internet Information Services (IIS)
Microsoft Windows
Windows Server
Link to public exploit:
Vulnerability description
The vulnerability allows a remote user to compromise the affected system.
The vulnerability exists due to improper access restrictions Windows HTTP.sys. A remote user can send specially crafted packets to the system and execute arbitrary code with SYSTEM privileges.
Note, successful exploitation of the vulnerability requires an Service Principal Name (SPN) that is registered to an account that no longer exists or is not in use.
The vulnerability exists due to improper access restrictions Windows HTTP.sys. A remote user can send specially crafted packets to the system and execute arbitrary code with SYSTEM privileges.
Note, successful exploitation of the vulnerability requires an Service Principal Name (SPN) that is registered to an account that no longer exists or is not in use.
Remediation
Install updates from vendor's website.