cve-2026-69620

CVE-2026-69620 is a Windows DHCP Server remote code execution vulnerability addressed in Microsoft's September 22, 2026 security release. The flaw affects listed Windows 10 and Windows Server releases, and administrators running the DHCP Server role on those systems need to install the mapped cumulative update and reach the specified fixed build. Microsoft assesses exploitation as unlikely, but the potential impact is high if it succeeds. The practical priority is to identify servers actually hosting DHCP and deploy the appropriate KB, rather than confusing client Windows installations with systems providing the DHCP Server role.