CVE-2026-50451
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In Windows Routing and Remote Access Service (RRAS), missing authentication for a critical function allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user can gain higher privileges, potentially leading to full system compromise.
Recommendation
It is recommended to apply the appropriate security patch from Microsoft or restrict access to the RRAS service.
Other vulnerabilities in Windows RRAS
See all- CVE-2026-62819High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- CVE-2024-30095High
Remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS). Allows an unauthenticated attacker to execute arbitrary code remotely in the context of the RRAS service.
- CVE-2024-30094High
A vulnerability in Windows Routing and Remote Access Service (RRAS) allows remote code execution. An unauthenticated attacker could exploit this flaw to take control of the affected system.
Original NVD description (English source)
Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.