CVE-2026-88115

Summary

An out-of-bounds read vulnerability in Windows Server for NFS allows remote attackers to execute arbitrary code on the affected system. This occurs when processing NFS requests, potentially enabling attackers to gain full control over the server.

Exploitability

Exploitation requires a network-based attack with minimal preconditions, as the vulnerability affects an unauthenticated service that can be accessed from any network location.

Blast radius

If exploited, this vulnerability could allow attackers to execute code on Windows Server systems running NFS services, potentially leading to complete server compromise and access to all shared resources.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable NFS server functionality immediately or apply the latest Windows Update KB5049123 which contains the fix for this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.