References https://www.sentinelone.com/vulnerability-database/cve-2022-26925/ https://cve.circl.lu/vuln/CVE-2022-26925 https://nvd.nist.gov/vuln/detail/CVE-2022-26925 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26925 https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-new-ntlm-relay-zero-day-in-all-windows-versions/ https://support.microsoft.com/en-us/topic/kb5005413-mitigating-ntlm-relay-attacks-on-active-directory-certificate-services-ad-cs-3612b773-4043-4aa9-b23d-b87910cd3429 https://www.cvedetails.com/cve/CVE-2022-26925/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26925
Related VulnerabilitiesPoCCVE-2026-29962: HSC MailInspector - Local File InclusionPoCCVE-2026-85200: GEO my WP <=4.5.5.3 - Unauthenticated Local File InclusionPoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File DisclosurePoCCVE-2026-26217: Crawl4AI < 0.8.0 - Local File InclusionPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information DisclosurePoCCVE-2025-2505: WordPress Age Gate <= 3.5.3 - Unauthenticated Local File InclusionPoCCVE-2021-47795: GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site ScriptingPoCCVE-2026-34036: Dolibarr <=22.0.4 - Local File InclusionPoCjoomla-com-fabrik-lfi: Joomla! com_fabrik 3.9.11 - Local File InclusionPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionRancher /v3-public/localProviders/local 默认口令漏洞PoCCVE-2024-10763: WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion