CVE-2026-85926
HighCVSS 8.1Summary
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Risk Assessment
The lack of authentication makes this flaw especially dangerous — an attacker can remotely execute code and take control of the VPN server.
Recommendation
Immediately apply Microsoft patches for Windows SSTP and limit exposure of the SSTP service to public networks.
Other vulnerabilities in Windows Secure Socket Tunneling Protocol (SSTP)
See all- CVE-2026-88147High
A heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
- CVE-2026-73009Critical
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
- CVE-2026-71332High
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS