CVE-2026-59116
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
Risk Assessment
An unauthenticated network attacker could bypass RDP session protections, potentially leading to unauthorized access.
Recommendation
Update Windows and enforce strong cryptographic algorithms in Remote Desktop configuration.
Other vulnerabilities in Windows Remote Desktop
See all- CVE-2026-40398High
Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
- CVE-2026-69518High
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
- CVE-2026-26151High
Insufficient UI warnings of dangerous operations in Windows Remote Desktop allow an unauthorized attacker to perform spoofing over a network.
- CVE-2023-35352High
A vulnerability in Windows Remote Desktop allows for a security feature bypass, potentially leading to unauthorized access to the system.
Original NVD description (English source)
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS