CVE-2026-85809
CriticalCVSS 9.8Summary
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.
Risk Assessment
An attacker could fully compromise the system, potentially leading to data theft or using it as a pivot for further attacks.
Recommendation
Urgently install security updates from Microsoft for RRAS.
Other vulnerabilities in Windows Routing and Remote Access Service
See all- CVE-2026-85792Critical
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.
- CVE-2026-72959High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- CVE-2026-70570High
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine.
- CVE-2026-69852High
A Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) allows an attacker to gain unauthorized access to the victim's machine.
- CVE-2026-57096High
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
Vulnerability data from NVD (NIST) · CISA KEV · EPSS