CVE Tools
Sign in

CVE-2026-55010

Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability

Published: Jul 14, 2026Updated: Jul 14, 2026 Sources: CVE List NVDCWE-122
9.8CRITICAL
NVD MITRE
EPSS Score
0.8%
Top 49.0%
CISA KEV
Not in KEV
Exploits
No Known Exploits
Remediation
No Fix Available
Self-Check
Not available

Description

Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network.

In plain language

AI Act now

CVE-2026-55010 is a serious remote code execution flaw in the Minecraft Bedrock Dedicated Server, where an attacker (with no login) could run code on your server over the network—so small businesses running this server should treat it as urgent and patch as soon as Microsoft provides the specific fixed update.

Executive summary

CVE-2026-55010 is an unauthenticated heap-based buffer overflow in Minecraft Bedrock Dedicated Server that can be triggered remotely over the network to achieve arbitrary code execution on the host; confirm exposure by whether your server is reachable and apply the Microsoft update referenced for this CVE.

If affected, business impact
Full server takeoverService shutdown or disruptionData theft from the serverMalware deployed on infrastructure

What to do now

  1. Check whether Minecraft Bedrock Dedicated Server is installed and currently running on any internet-accessible machine.
  2. Verify the server’s network exposure (can it be reached from the public internet, and on which ports).
  3. Open the Microsoft update page for CVE-2026-55010 and identify the exact patched update/package version for your server environment.
  4. Upgrade/apply the Microsoft-referenced fix from the vendor page for CVE-2026-55010 (use the exact version stated there).
  5. After updating, restart the server and confirm it still runs normally and is patched.
  6. Monitor the server logs/network traffic for unusual connections or crashes around the time of exposure until you’ve confirmed the fix is applied.
Patch / advisory Some work to apply

CVSS Vector Breakdown

AV:NAC:LPR:NUI:NS:UC:HI:HA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

CWE-122

Affected Products

Microsoft
commercial·US
Minecraft Bedrock Dedicated ServerOn-prem
Operating Systems / windows

Exploitability

No known exploits, KEV entries, or remediation guidance available for this vulnerability yet.
Is your org exposed to CVE-2026-55010?We can run the check for you — a free external exposure review, no install. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

1 technique
Privilege Escalation
View detailed technique mapping

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55010
msrc.microsoft.com
News mentions
6

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-55010 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows