Question 1

What is CVE-2026-50380?

Accepted Answer

CVE-2026-50380 is a critical-severity software vulnerability with a CVSS score of 9.6.

Question 2

Is CVE-2026-50380 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Question 3

What products does CVE-2026-50380 affect?

Accepted Answer

Tracked products affected include Windows Server 2016, Windows Server 2019, Windows Server 2022, Windows Server 2025. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2026-50380?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2026-50380

Summary

Affected products we track (4)

Recommendation

Additional information