cve 2026-45602

CVE-2026-45602 is a Windows DHCP Server tampering vulnerability disclosed by Microsoft on June 9, 2026. It affects supported Windows client and server releases with a CVSS base score of 9.1, indicating critical severity despite an "Important" label. The vulnerability is network-reachable, low-complexity, and requires no user interaction. No public disclosure or active exploitation was reported at publication. Administrators are advised to prioritize patching this flaw in Windows Server environments. Discussions on WindowsForum.com focus on the urgency of applying the official fix and the discrepancy between the severity score and the assigned label.