CVE-2026-56179MediumCVSS 8.3
Windows Network Address Translation (NAT) Spoofing Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
🎯 Affected products8
- Windows 11 Version 24H2 for ARM64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
- Windows 11 Version 25H2 for ARM64-based Systems
- Windows 11 Version 25H2 for x64-based Systems
- Windows 11 Version 26H1 for ARM64-based Systems
- Windows 11 version 26H1 for x64-based Systems
- Windows Server 2025
- Windows Server 2025 (Server Core installation)
✅ Remediation
KB5120233 (Security Update) — fixed build 10.0.26100.33296 KB5120228 (Security Hotpatch Update) — fixed build 10.0.26100.33222 KB5121003 (Security Update) — fixed build 10.0.26200.9168 KB5120994 (Security Hotpatch Update) — fixed build 10.0.26200.9106 KB5121003 (Security Update) — fixed build 10.0.26100.9168 KB5120994 (Security Hotpatch Update) — fixed build 10.0.26100.9106 KB5121000 (Security Update) — fixed build 10.0.28000.2704
🔗 References (11)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56179
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233
- referencehttps://support.microsoft.com/help/5120233
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228
- referencehttps://support.microsoft.com/help/5120228
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003
- referencehttps://support.microsoft.com/help/5121003
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994
- referencehttps://support.microsoft.com/help/5120994
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000
- referencehttps://support.microsoft.com/help/5121000