Question 1

What is CVE-2026-49798?

Accepted Answer

CVE-2026-49798 is a critical-severity software vulnerability with a CVSS score of 9.3.

Question 2

Is CVE-2026-49798 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 2%.

Question 3

What products does CVE-2026-49798 affect?

Accepted Answer

Tracked products affected include Windows Server 2016, Windows Server 2019, Windows Server 2022, Windows Server 2025. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2026-49798?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2026-49798

Summary

Affected products we track (4)

Recommendation

Additional information