Nov 2026: Windows NTLM Spoofing Vulnerability
CVE-2026-121680 Published on November 10, 2026
Windows NTLM Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
YES
Technical Impact:
PARTIAL
Weakness Type
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Products Associated with CVE-2026-121680
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
