Skip to content

Exploited: 178

LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access

7.4

CVE-2026-118147Fix available

Visual Studio Spoofing Vulnerability

Microsoft Microsoft Visual Studio 2017 version 15.92026-10-31 18:13 UTC1 min readRead in

Summary

Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.

Remediation

Inventory every Microsoft Microsoft Visual Studio 2017 version 15.9 deployment, including staging.
Upgrade Microsoft Microsoft Visual Studio 2017 version 15.9 to the fixed version for your release line, listed under Affected versions.
Confirm the running version after the upgrade.

References

Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118147

CVSS vector

Attack vector: Network
Complexity: High
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: None

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected versions

Version	Fixed in
15.9.0 – <15.9.84	15.9.84
16.11.0 – <16.11.62	16.11.62
17.14.0 – <17.14.44	17.14.44
18.11.0 – <18.11.3	18.11.3

Weakness

CWE-295

Exploit probability (EPSS)

0.6%

Timeline

2026-10-31Publicly disclosed

Sources

CVE · NVD