CVE-2026-69646 HIGH

CVE-2026-69646: Skype for Business Spoofing Vulnerability

Vendor Microsoft
Product Skype for Business Server 2015 CU13
Weakness CWE-347
Published September 8, 2026
Last update September 9, 2026
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C

What the vulnerability does

01Description

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

Key dates

02Disclosure timeline

September 8, 2026 CVE published
September 9, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-42743 WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability CVE-2026-28148 WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability CVE-2026-0750 Payment bypass in Commerce Paybox CVE-2026-5050 Payment Gateway for Redsys & WooCommerce Lite <= 7.0.0 - Improper Verification of Cryptographic Signature to Unauthenticated Payment Status Manipulation CVE-2026-15013 SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion