Home Microsoft CVE-2026-0386
Back to Microsoft

CVE-2026-0386

Windows - Deployment Services

Microsoft CVSS 7.5 Updated March 15, 2026

Executive Risk Summary

"An improper access control vulnerability in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network, potentially leading to code execution and system compromise. This vulnerability poses a significant risk to Windows systems that use Deployment Services, as it could be exploited to gain unauthorized access and control."

Operational Audit Arsenal

Target Type System Service
Target Asset wdssvc.dll
Standard Path %windir%\System32
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: wdssvc.dll (System Service)
$Targets = 'wdssvc.dll'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Moderate

Internal Work Notes

CVE-2026-0386: Windows Deployment Services vulnerability - Improper access control allows code execution over adjacent network. Apply Microsoft patch and restart affected systems.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Microsoft Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.