CVE-2026-20812

MediumCVSS 6.5

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.12%

63th percentile - higher than 63% of all known CVEs

Summary

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.

Risk Assessment

An authorized attacker could modify data transmitted via LDAP, potentially leading to directory integrity compromise, unauthorized configuration changes, or privilege escalation.

Recommendation

Install the latest Windows security updates that address this vulnerability in the LDAP component.

Original NVD description (English source)

Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.