CVE-2026-72950 – Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A low-privileged attacker can turn network access to RRAS into remote code execution, putting the confidentiality, integrity, and availability of affected systems at risk.”
CVE-2026-72950 is a critical heap-based buffer overflow vulnerability in Windows Routing and Remote Access Service (RRAS). An authenticated attacker with low-level access can send a specially crafted network request to an affected server and execute code without requiring user interaction. The vulnerability has not been publicly disclosed or exploited, and its exploitation assessment is Exploitation Unlikely.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.