CVE-2026-69852 – Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS 7.5
IMPORTANT
Critical - Same Day Deployment
“A successful attack could turn a network-reachable RRAS flaw into unauthorized control of a Windows machine, putting sensitive data and system availability at risk.”
CVE-2026-69852 is a Critical remote code execution vulnerability in Windows Routing and Remote Access Service (RRAS). It is caused by a heap-based buffer overflow. An attacker with low privileges could potentially exploit the vulnerability over a network without requiring user interaction. Successful exploitation has high attack complexity and is not guaranteed, but could result in unauthorized access with high impact to confidentiality, integrity, and availability. The vulnerability is not publicly disclosed and is not known to be exploited.
Key Details
- Attack Vector
- Network
- Attack Complexity
- High
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.