CVE-2026-118145
A NVD · · CVE-2026-118145
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key metrics
- CVSS
- 7.5
- EPSS
- 0%
Key insight
Pure NVD patch information with no indication of active exploitation or a PoC , the only added value is the classification as RCE requiring attack access from an adjacent network segment.
Description
The Windows Function Discovery SSDP Provider contains a use-after-free vulnerability that can be exploited by an unauthenticated attacker. According to the NVD entry, the flaw allows code execution over an adjacent network (attack vector: adjacent), so direct internet access is not required. Affected are Windows systems on which the Function Discovery service or the SSDP-based discovery mechanism is active, as is typically the case in server and client installations. At the time of the report there is no information about active exploitation, public exploit code, or inclusion in the CISA KEV list. Exposure arises in particular in segmented networks where multicast/SSDP traffic between zones is permitted.
Risk score
- cvss base
- 75.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 75.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational