CVE-2026-72959 – Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
“A specially crafted network request could turn low-level server access into remote code execution, putting sensitive data and system availability at risk.”
This critical vulnerability is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS). An authenticated attacker with low-level access can send a specially crafted request to an affected server and potentially execute code. The attack can be performed over the network with low complexity and requires no user interaction.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-122
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.