// CVE · PUBLISHED 2026-09-08

CVE-2026-66302

Microsoft / Skype for Business Server 2015 CU13 · Microsoft / Skype for Business Server 2019 CU8 · Microsoft / Skype for Business Server Subscription Edition CU1

9.8 · CVSS 3.1Critical

Description

External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.

References

www.cve.org/CVERecord ↗
nvd.nist.gov/vuln/detail/CVE-2026-66302 ↗
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66302 ↗

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.

CVE-2026-66302

Description

References

Related CVEs