Skip to main content
← All vulnerabilities
CVE-2026-72959

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 10.0.14393.9512, 10.0.17763.9245, 10.0.19044.7725, 10.0.19045.7725, 10.0.22631.7582, and 7 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Microsoft Windows 10 Version 1607

    From 10.0.14393.0 · fixed in 10.0.14393.9512

  • Microsoft Windows 10 Version 1809

    From 10.0.17763.0 · fixed in 10.0.17763.9245

  • Microsoft Windows 10 Version 21H2

    From 10.0.19044.0 · fixed in 10.0.19044.7725

  • Microsoft Windows 10 Version 22H2

    From 10.0.19045.0 · fixed in 10.0.19045.7725

  • Microsoft Windows 11 version 23H2

    From 10.0.22631.0 · fixed in 10.0.22631.7582

  • Microsoft Windows 11 Version 23H2

    From 10.0.22631.0 · fixed in 10.0.22631.7582

  • Microsoft Windows 11 Version 24H2

    From 10.0.26100.0 · fixed in 10.0.26100.9445

  • Microsoft Windows 11 Version 25H2

    From 10.0.26200.0 · fixed in 10.0.26200.9445

  • Microsoft Windows 11 version 26H1

    From 10.0.28000.0 · fixed in 10.0.28000.2954

  • Microsoft Windows Server 2012

    From 6.2.9200.0 · fixed in 6.2.9200.26349

  • Microsoft Windows Server 2012 (Server Core installation)

    From 6.2.9200.0 · fixed in 6.2.9200.26349

  • Microsoft Windows Server 2012 R2

    From 6.3.9600.0 · fixed in 6.3.9600.23398

  • Microsoft Windows Server 2012 R2 (Server Core installation)

    From 6.3.9600.0 · fixed in 6.3.9600.23398

  • Microsoft Windows Server 2016

    From 10.0.14393.0 · fixed in 10.0.14393.9512

  • Microsoft Windows Server 2016 (Server Core installation)

    From 10.0.14393.0 · fixed in 10.0.14393.9512

  • Microsoft Windows Server 2019

    From 10.0.17763.0 · fixed in 10.0.17763.9245

  • Microsoft Windows Server 2019 (Server Core installation)

    From 10.0.17763.0 · fixed in 10.0.17763.9245

  • Microsoft Windows Server 2022

    From 10.0.20348.0 · fixed in 10.0.20348.5622

  • Microsoft Windows Server 2025

    From 10.0.26100.0 · fixed in 10.0.26100.33438

  • Microsoft Windows Server 2025 (Server Core installation)

    From 10.0.26100.0 · fixed in 10.0.26100.33438

References 1

msrc.microsoft.com