CVE-2026-70297
CVE-2026-70297 · Skype for Business Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
CVSS 8.8 · High · EPSS 1.0%
- Published
- Updated
Affected products and versions
skype for business server 2015 cu13
- Versions
- ≥ 9319.0, < 6.0.9319.886: Affected (custom)
No fix published
skype for business server 2019 cu8
- Versions
- ≥ 2046.0, < 7.0.2046.583: Affected (custom)
No fix published
skype for business server subscription edition cu1
- Versions
- ≥ 2046.0, < 7.0.2046.889: Affected (custom)
No fix published