Vulnerability in Microsoft Skype For Business Server 2015 Cu13
CVE-2026-69646
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
CVSS v3 metric
CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L.
Affected products
Weakness classification (CWE)
References
- secure@microsoft.com (vendor-advisory, patch)
Frequently asked questions
- What is CVE-2026-69646?
- CVE-2026-69646 is a high-severity vulnerability in Microsoft Skype For Business Server 2015 Cu13, classified under Improper Verification of Cryptographic Signature. CVSS score: 8.3/10. Published 2026-09-08.
- How severe is CVE-2026-69646?
- High severity. CVSS v3 base score is 8.3 out of 10.