CVE-2026-70570
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.
Risk Assessment
A remote attacker could take control of the system without authentication, posing a serious threat to network security.
Recommendation
Apply security patches immediately and restrict access to RRAS from trusted networks.
Other vulnerabilities in Windows Routing and Remote Access Service
See all- CVE-2026-85809Critical
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.
- CVE-2026-85792Critical
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.
- CVE-2026-96316Medium
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
- CVE-2026-84020High
Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-84017High
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-103558High
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-72959High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- CVE-2026-69852High
A Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) allows an attacker to gain unauthorized access to the victim's machine.
- CVE-2026-57096High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Vulnerability data from NVD (NIST) · CISA KEV · EPSS