Is CVE-2026-27925 actively exploited?

No active exploitation of CVE-2026-27925 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-27925 be exploited remotely?

Partially. CVE-2026-27925 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-27925?

CVE-2026-27925 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2026-27925

MEDIUM

CVE-2026-27925

CWE-416Published: April 14, 2026· Updated: Apr 17, 2026

6.5

CVSS v3.1

EPSS:0.06%probability of exploitation in 30 daysPercentile:18.9th

Official Description

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.

NVD Source

Technical Analysis

CVE-2026-27925 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 6.5.

From a weakness classification perspective (CWE-416): Use-after-free vulnerabilities involve accessing memory after it has been freed, often enabling arbitrary code execution.