CVE Catalog
CVE-2026-61356
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
Missing authentication for a critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the missing authentication to perform critical operations, potentially leading to privilege escalation and system compromise.
Recommendation
Apply security updates. Implement additional authentication mechanisms for Remote Desktop Services.
Original NVD description (English source)
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.