CVE-2026-69646 PUBLISHED

Skype for Business Spoofing Vulnerability

Assigner: microsoft
Reserved: 03.08.2026 Published: 08.09.2026 Updated: 09.09.2026

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

Metrics

CVSS Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C
CVSS Score: 8.3

Product Status

Vendor Microsoft
Product Skype for Business Server 2015 CU13
Versions
  • affected from 9319.0 to 6.0.9319.885 (excl.)
Vendor Microsoft
Product Skype for Business Server 2019 CU8
Versions
  • affected from 2046.0 to 7.0.2046.569 (excl.)
Vendor Microsoft
Product Skype for Business Server Subscription Edition CU1
Versions
  • affected from 2046.0 to 7.0.2046.879 (excl.)

References

Problem Types