A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. (CVE-2026-65641)

This vulnerability permits an unauthenticated attacker on the network to coerce SMB authentication from the service account, indicating a weakness in authentication enforcement. The vulnerability is classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel). The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and critical impact on confidentiality, integrity, and availability. No affected versions or patch information are provided, and no known exploits have been reported.

An unauthenticated attacker can coerce SMB authentication from the service account, potentially leading to unauthorized access or impersonation of the service account. This could compromise confidentiality, integrity, and availability of the affected system or network resources. The severity is critical based on the CVSS 4.0 vector and impact metrics.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is available at this time.