{"id":46792,"date":"2026-09-11T08:23:58","date_gmt":"2026-09-11T08:23:58","guid":{"rendered":"https:\/\/fidelissecurity.com\/?post_type=vulnerabilities&#038;p=46792"},"modified":"2026-09-15T06:30:40","modified_gmt":"2026-09-15T06:30:40","slug":"cve-2026-65791","status":"publish","type":"vulnerabilities","link":"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-65791\/","title":{"rendered":"CVE-2026-65791"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"46792\" class=\"elementor elementor-46792\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"vulnerabilities\">\n\t\t\t\t<div class=\"elementor-element elementor-element-10f184a e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"10f184a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0e2ebbc elementor-widget elementor-widget-heading\" data-id=\"0e2ebbc\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"summary\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Summary<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0352243 elementor-widget elementor-widget-text-editor\" data-id=\"0352243\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>CVE-2026-65791 is a critical heap-based buffer overflow in the Windows iSCSI Target Service. An unauthenticated attacker can send a specially crafted network packet to an affected service and potentially execute code remotely. The vulnerability has a CVSS score of 9.8, with network-based exploitation requiring no privileges or user interaction.<\/p><p>The vulnerability affects Windows 10 Version 1607 and 1809, and Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025. Microsoft has released security updates with specific fixed builds for the affected products.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0b3f860 elementor-widget elementor-widget-heading\" data-id=\"0b3f860\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"actions-required\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Urgent Actions Required<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e58d2d elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"8e58d2d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Apply the applicable Microsoft security update and verify that the affected system reaches the corresponding fixed build.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Prioritize systems running the Windows iSCSI Target Service, particularly those where the service can be reached over the network.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Restrict iSCSI traffic to known, trusted initiator IP addresses using network access controls where appropriate.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-check-square\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Monitor iSCSI traffic for unusual packet sizes or connection patterns that could indicate attempted exploitation.<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e6059c5 elementor-widget elementor-widget-heading\" data-id=\"e6059c5\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"vulnerable-systems\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Which Systems Are Vulnerable to\u202fCVE-2026-65791?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-91f5818 elementor-widget elementor-widget-heading\" data-id=\"91f5818\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Technical Overview\u202f<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d261fe2 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"d261fe2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Vulnerability Type:<\/b> Heap-Based Buffer Overflow (CWE-122)<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Affected Software\/Versions:<\/b> <ul> <li>Windows 10 Version 1607: below 10.0.14393.9418<\/li> <li>Windows 10 Version 1809: below 10.0.17763.9121<\/li> <li>Windows Server 2012: below 6.2.9200.26280<\/li> <li>Windows Server 2012 R2: below 6.3.9600.23338<\/li> <li>Windows Server 2016: below 10.0.14393.9418 <\/li> <li>Windows Server 2019: below 10.0.17763.9121<\/li> <li>Windows Server 2022: below 10.0.20348.5499<\/li> <li>Windows Server 2025: below 10.0.26100.33296<\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>CVSS Vector:\u202fv3.1<\/b> <ul> <li>Attack Vector: Network<\/li> <li>Attack Complexity: Low<\/li> <li>Privileges Required: None <\/li> <li>User Interaction: None <\/li> <li>Scope: Unchanged<\/li> <li>Confidentiality Impact: High<\/li> <li>Integrity Impact: High <\/li> <li>Availability Impact: High<\/li><\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Patch Availability:<\/b>\u202fYes, available\u202f<ol> <li><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2026-65791\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">CVE-2026-65791 - Security Update Guide - Microsoft - Windows iSCSI Target Service Remote Code Execution Vulnerability<\/a><\/li> <\/ol><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-759b53d elementor-widget elementor-widget-heading\" data-id=\"759b53d\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"exploitation-path\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How Does the\u202fCVE-2026-65791 Exploit Work?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0e9e9cb elementor-widget elementor-widget-text-editor\" data-id=\"0e9e9cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun SCXW89133380 BCX8\" lang=\"EN-IN\" xml:lang=\"EN-IN\" data-contrast=\"auto\"><span class=\"NormalTextRun SCXW89133380 BCX8\">The attack typically follows these steps:<\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b05bab elementor-widget elementor-widget-image\" data-id=\"2b05bab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1943\" height=\"2048\" src=\"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-1943x2048-1.webp\" class=\"attachment-full size-full wp-image-47073\" alt=\"\" srcset=\"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-1943x2048-1.webp 1943w, https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-1943x2048-1-285x300.webp 285w, https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-1943x2048-1-972x1024.webp 972w, https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-1943x2048-1-768x810.webp 768w, https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-1943x2048-1-1457x1536.webp 1457w\" sizes=\"(max-width: 1943px) 100vw, 1943px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a93a1eb elementor-widget elementor-widget-heading\" data-id=\"a93a1eb\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"root-cause\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Causes\u202fCVE-2026-65791?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7275c12 elementor-widget elementor-widget-text-editor\" data-id=\"7275c12\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Vulnerability Root Cause:\u202f<\/strong>\u202f\u202f<\/p><p>CVE-2026-65791 is caused by a heap-based buffer overflow in the Windows iSCSI Target Service. A specially crafted network packet can trigger the flaw, allowing an unauthorized attacker to execute code remotely.\u202f<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-496d048 e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"496d048\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e1e32da elementor-widget elementor-widget-heading\" data-id=\"e1e32da\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"mitigation\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How Can You Mitigate\u202fCVE-2026-65791?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4f81845 elementor-widget elementor-widget-text-editor\" data-id=\"4f81845\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>If immediate patching is delayed or not possible:\u202f<\/p><ul><li>Restrict iSCSI traffic to known, trusted initiator IP addresses using network access controls.<\/li><li>Monitor iSCSI traffic for unusual packet sizes or connection patterns that could indicate exploitation attempts.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-048e63e elementor-widget elementor-widget-heading\" data-id=\"048e63e\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"asset-and-systems-risk\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Which Assets and Systems Are at Risk?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a622920 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"a622920\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Asset Types Affected:<\/b> <ul> <li>Windows 10 systems - Version 1607 and Version 1809 <\/li> <li>Windows Server systems - Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Exposure Level:<\/b> <ul> <li>Network-reachable systems - The vulnerability can be exploited remotely over the network<\/li> <li>Windows iSCSI Target Service - The vulnerability affects this service<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-16d5fc0 elementor-widget elementor-widget-heading\" data-id=\"16d5fc0\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"detection\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How Can You Detect\u202fCVE-2026-65791 Exploitation?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3af05b1 elementor-widget elementor-widget-heading\" data-id=\"3af05b1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Exploitation Signatures:<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a539b10 elementor-widget elementor-widget-text-editor\" data-id=\"a539b10\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Look for specially crafted network packets targeting the Windows iSCSI Target Service.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d388fac elementor-widget elementor-widget-heading\" data-id=\"d388fac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Indicators of Compromise (IOCs\/IOAs):\u202f<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4912b8f elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"4912b8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Unusual iSCSI packet sizes<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Unusual iSCSI connection patterns<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-221fc5e elementor-widget elementor-widget-heading\" data-id=\"221fc5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Behavioral\u202fIndicators:<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f737893 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"f737893\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Unexpected network activity targeting the Windows iSCSI Target Service<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Network traffic patterns consistent with attempted exploitation<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9a751ff elementor-widget elementor-widget-heading\" data-id=\"9a751ff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Alerting Strategy:<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2280585 elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"2280585\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Priority: Critical<\/b><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Trigger alerts for:<\/b> <ul> <li>Unusual iSCSI packet sizes<\/li> <li>Unusual iSCSI connection patterns<\/li> <li>Suspicious network traffic targeting the affected service<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ccf3cc elementor-widget elementor-widget-heading\" data-id=\"1ccf3cc\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"remediation-response\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Remediation &amp; Response<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-839aa54 elementor-widget-laptop__width-initial elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"839aa54\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Remediation Timeline:<\/b> <ul> <li>Immediate: Apply the applicable Microsoft security update<\/li> <li>Within 24 hrs: Verify affected systems have reached the required fixed build<\/li> <li>Ongoing: Monitor iSCSI traffic for unusual packet sizes or connection patterns<\/li><\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><b>Incident Response Considerations:<\/b> <ul> <li>Monitor network traffic targeting the Windows iSCSI Target Service<\/li> <li>Review unusual iSCSI packet sizes or connection patterns for potential exploitation attempts<\/li> <\/ul><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9cf1f94 content-align-cta-default elementor-widget elementor-widget-eael-cta-box\" data-id=\"9cf1f94\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"eael-cta-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"eael-call-to-action cta-basic bg-lite cta-preset-1\">\n        <h4 class=\"title eael-cta-heading\"><span class=\"eael-cta-title-text elementor-repeater-item-ba8b47d\">See How<\/span> <span class=\"eael-cta-title-text elementor-repeater-item-581abbc\">Open XDR Strengthens<\/span> <span class=\"eael-cta-title-text elementor-repeater-item-e8718a5\">Enterprise Cyber Defense<\/span> <\/h4><ul style=\"color: #ffffff\">\n \t<li style=\"list-style-type: none\">\n<ul style=\"color: #ffffff\">\n \t<li style=\"list-style-type: none\">\n<ul style=\"color: #ffffff\">\n \t<li>Unified visibility across your security environment<\/li>\n \t<li>Flexible integration with your existing security tools<\/li>\n \t<li>Faster detection and response to post-attack breaches<\/li>\n<li>Practical insights for strengthening your cyber defenses<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul><a href=\"https:\/\/fidelissecurity.com\/resource\/solution-brief\/fidelis-elevate-solution-brief\/\" class=\"cta-button cta-preset-1  \">Download the Solution Brief <\/a>\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-6753ae5c e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"6753ae5c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9cc6dc7 elementor-widget elementor-widget-heading\" data-id=\"9cc6dc7\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"cvss-breakdown-table\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">CVSS Breakdown Table\u202f<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e351f26 elementor-widget elementor-widget-Table\" data-id=\"e351f26\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"Table.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<table class=\"tafe-table \">\n\t\t\t<thead  class=\"tafe-table-header\">\n\t\t\t\t<tr>\n\t\t\t\t\t<th class=\"elementor-inline-editing elementor-repeater-item-58d4a4b\"   >Metric<\/th><th class=\"elementor-inline-editing elementor-repeater-item-5df925d\"   >Value\u202f<\/th><th class=\"elementor-inline-editing elementor-repeater-item-1a6f993\"   >Description<\/th>\t\t\t\t<\/tr>\n\t\t\t<\/thead>\n\t\t\t\t\t\t<tbody class=\"tafe-table-body\">\n\t\t\t\t<tr>\n\t\t\t\t\t<td data-label=\"Metric\"   class=\"elementor-repeater-item-480a869 td-content-type-default\" >Base Score<\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-ff1827d td-content-type-default\" >9.8<\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-5024640 td-content-type-default\" >Critical severity  <\/td><\/tr><tr><td data-label=\"Metric\"   class=\"elementor-repeater-item-1ddd412 td-content-type-default\" >Attack Vector<\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-bbd7e7e td-content-type-default\" >Network<\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-4a0a1fd td-content-type-default\" >Can be exploited remotely over a network <\/td><\/tr><tr><td data-label=\"Metric\"   class=\"elementor-repeater-item-6c597f3 td-content-type-default\" >Attack Complexity<\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-ed0abd9 td-content-type-default\" >Low<\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-7a9fabf td-content-type-default\" >Exploitation does not require special conditions <\/td><\/tr><tr><td data-label=\"Metric\"   class=\"elementor-repeater-item-91f8a20 td-content-type-default\" >Privileges Required<\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-5531257 td-content-type-default\" >None<\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-7e3c677 td-content-type-default\" >No authentication or privileges are required <\/td><\/tr><tr><td data-label=\"Metric\"   class=\"elementor-repeater-item-2a08640 td-content-type-default\" >User Interaction <\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-ba738dd td-content-type-default\" >None<\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-86ba742 td-content-type-default\" >No user action is required <\/td><\/tr><tr><td data-label=\"Metric\"   class=\"elementor-repeater-item-83d4b57 td-content-type-default\" >Scope <\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-a033634 td-content-type-default\" >Unchanged <\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-2f5ca21 td-content-type-default\" >Impact remains within the vulnerable component <\/td><\/tr><tr><td data-label=\"Metric\"   class=\"elementor-repeater-item-9e69ec2 td-content-type-default\" >Confidentiality Impact <\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-60a205a td-content-type-default\" >High<\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-b6f0509 td-content-type-default\" >Successful exploitation can compromise confidentiality <\/td><\/tr><tr><td data-label=\"Metric\"   class=\"elementor-repeater-item-9f056c9 td-content-type-default\" >Integrity Impact <\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-1a6b266 td-content-type-default\" >High<\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-4e63a19 td-content-type-default\" >Successful exploitation can compromise system integrity <\/td><\/tr><tr><td data-label=\"Metric\"   class=\"elementor-repeater-item-d664870 td-content-type-default\" >Availability Impact<\/td><td data-label=\"Value\u202f\"   class=\"elementor-repeater-item-bfc0d04 td-content-type-default\" >High<\/td><td data-label=\"Description\"   class=\"elementor-repeater-item-6066841 td-content-type-default\" >Successful exploitation can disrupt system availability <\/td>\t\t\t\t<\/tr>\n\t\t\t<\/tbody>\n\t\t<\/table>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-29f0fef e-ecs-flex e-flex e-con-boxed e-con e-parent\" data-id=\"29f0fef\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ecs_container_type&quot;:&quot;flex&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fd79500 elementor-widget elementor-widget-heading\" data-id=\"fd79500\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"resources\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\">References:<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3bdf004 elementor-widget elementor-widget-text-editor\" data-id=\"3bdf004\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ol><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2026-65791\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">NVD-CVE-2026-65791<\/a><\/li><li><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-65791\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">CVE Record: CVE-2026-65791<\/a><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>CVE-2026-65791 is a critical Windows iSCSI Target Service vulnerability that allows unauthorized attackers to execute code remotely over a network.<\/p>\n","protected":false},"featured_media":47071,"template":"","severity":[1483],"vuln_year":[1524],"class_list":["post-46792","vulnerabilities","type-vulnerabilities","status-publish","has-post-thumbnail","hentry","severity-critical","vuln_year-1524"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-65791: Windows iSCSI Target Service RCE | Fidelis Security<\/title>\n<meta name=\"description\" content=\"CVE-2026-65791 allows unauthorized attackers to execute code remotely through a heap-based buffer overflow in Windows iSCSI Target Service.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-65791\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-65791: Windows iSCSI Target Service RCE | Fidelis Security\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-65791 allows unauthorized attackers to execute code remotely through a heap-based buffer overflow in Windows iSCSI Target Service.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/\" \/>\n<meta property=\"og:site_name\" content=\"Fidelis Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/fideliscyber\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-15T06:30:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-scaled-1.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2429\" \/>\n\t<meta property=\"og:image:height\" content=\"2560\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@FidelisCyber\" \/>\n<meta name=\"twitter:label1\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/vulnerabilities\\\/cve-2026-65791\\\/\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-65791\\\/\",\"name\":\"CVE-2026-65791: Windows iSCSI Target Service RCE | Fidelis Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-65791\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-65791\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/CVE-2026-65791-scaled-1.webp\",\"datePublished\":\"2026-09-11T08:23:58+00:00\",\"dateModified\":\"2026-09-15T06:30:40+00:00\",\"description\":\"CVE-2026-65791 allows unauthorized attackers to execute code remotely through a heap-based buffer overflow in Windows iSCSI Target Service.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-65791\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-65791\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-65791\\\/#primaryimage\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/CVE-2026-65791-scaled-1.webp\",\"contentUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/CVE-2026-65791-scaled-1.webp\",\"width\":2429,\"height\":2560,\"caption\":\"CVE-2026-65791\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/vulnerabilities\\\/cve-2026-65791\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilities\",\"item\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/vulnerabilities\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CVE-2026-65791\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\",\"name\":\"Fidelis Security\",\"description\":\"Unified Threat Detection and Response Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#organization\"},\"alternateName\":\"Fidelis\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#organization\",\"name\":\"Fidelis Security\",\"alternateName\":\"Fidelis\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fidelis-Security-Logo-SVG.svg\",\"contentUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fidelis-Security-Logo-SVG.svg\",\"width\":500,\"height\":500,\"caption\":\"Fidelis Security\"},\"image\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/fideliscyber\\\/\",\"https:\\\/\\\/x.com\\\/FidelisCyber\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/fideliscybersecurity\",\"https:\\\/\\\/www.youtube.com\\\/c\\\/FidelisCybersecurity\",\"https:\\\/\\\/www.gartner.com\\\/reviews\\\/market\\\/network-detection-and-response\\\/vendor\\\/fidelis-security\",\"https:\\\/\\\/www.g2.com\\\/sellers\\\/fidelis-cybersecurity#profiles\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-65791: Windows iSCSI Target Service RCE | Fidelis Security","description":"CVE-2026-65791 allows unauthorized attackers to execute code remotely through a heap-based buffer overflow in Windows iSCSI Target Service.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-65791\/","og_locale":"es_ES","og_type":"article","og_title":"CVE-2026-65791: Windows iSCSI Target Service RCE | Fidelis Security","og_description":"CVE-2026-65791 allows unauthorized attackers to execute code remotely through a heap-based buffer overflow in Windows iSCSI Target Service.","og_url":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/","og_site_name":"Fidelis Security","article_publisher":"https:\/\/www.facebook.com\/fideliscyber\/","article_modified_time":"2026-09-15T06:30:40+00:00","og_image":[{"width":2429,"height":2560,"url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-scaled-1.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_site":"@FidelisCyber","twitter_misc":{"Tiempo de lectura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/cve-2026-65791\/","url":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/","name":"CVE-2026-65791: Windows iSCSI Target Service RCE | Fidelis Security","isPartOf":{"@id":"https:\/\/fidelissecurity.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/#primaryimage"},"image":{"@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/#primaryimage"},"thumbnailUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-scaled-1.webp","datePublished":"2026-09-11T08:23:58+00:00","dateModified":"2026-09-15T06:30:40+00:00","description":"CVE-2026-65791 allows unauthorized attackers to execute code remotely through a heap-based buffer overflow in Windows iSCSI Target Service.","breadcrumb":{"@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/#primaryimage","url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-scaled-1.webp","contentUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2026\/09\/CVE-2026-65791-scaled-1.webp","width":2429,"height":2560,"caption":"CVE-2026-65791"},{"@type":"BreadcrumbList","@id":"https:\/\/fidelissecurity.com\/vulnerabilities\/cve-2026-65791\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/fidelissecurity.com\/es\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilities","item":"https:\/\/fidelissecurity.com\/es\/vulnerabilities\/"},{"@type":"ListItem","position":3,"name":"CVE-2026-65791"}]},{"@type":"WebSite","@id":"https:\/\/fidelissecurity.com\/es\/#website","url":"https:\/\/fidelissecurity.com\/es\/","name":"Fidelis Security","description":"Unified Threat Detection and Response Platform","publisher":{"@id":"https:\/\/fidelissecurity.com\/es\/#organization"},"alternateName":"Fidelis","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fidelissecurity.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/fidelissecurity.com\/es\/#organization","name":"Fidelis Security","alternateName":"Fidelis","url":"https:\/\/fidelissecurity.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/fidelissecurity.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/08\/Fidelis-Security-Logo-SVG.svg","contentUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/08\/Fidelis-Security-Logo-SVG.svg","width":500,"height":500,"caption":"Fidelis Security"},"image":{"@id":"https:\/\/fidelissecurity.com\/es\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/fideliscyber\/","https:\/\/x.com\/FidelisCyber","https:\/\/www.linkedin.com\/company\/fideliscybersecurity","https:\/\/www.youtube.com\/c\/FidelisCybersecurity","https:\/\/www.gartner.com\/reviews\/market\/network-detection-and-response\/vendor\/fidelis-security","https:\/\/www.g2.com\/sellers\/fidelis-cybersecurity#profiles"]}]}},"_links":{"self":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vulnerabilities\/46792","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vulnerabilities"}],"about":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/types\/vulnerabilities"}],"version-history":[{"count":6,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vulnerabilities\/46792\/revisions"}],"predecessor-version":[{"id":47079,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vulnerabilities\/46792\/revisions\/47079"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/media\/47071"}],"wp:attachment":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/media?parent=46792"}],"wp:term":[{"taxonomy":"severity","embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/severity?post=46792"},{"taxonomy":"vuln_year","embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/vuln_year?post=46792"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}