Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-85809

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 10.0.14393.9612, 10.0.17763.9376, 10.0.19044.7807, 10.0.19045.7807, 10.0.22631.7652, and 8 more
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Affected versions

  • Microsoft Windows 10 Version 1607

    From 10.0.14393.0 · fixed in 10.0.14393.9612

  • Microsoft Windows 10 Version 1809

    From 10.0.17763.0 · fixed in 10.0.17763.9376

  • Microsoft Windows 10 Version 21H2

    From 10.0.19044.0 · fixed in 10.0.19044.7807

  • Microsoft Windows 10 Version 22H2

    From 10.0.19045.0 · fixed in 10.0.19045.7807

  • Microsoft Windows 11 version 23H2

    From 10.0.22631.0 · fixed in 10.0.22631.7652

  • Microsoft Windows 11 Version 23H2

    From 10.0.22631.0 · fixed in 10.0.22631.7652

  • Microsoft Windows 11 Version 24H2

    From 10.0.26100.0 · fixed in 10.0.26100.9711

  • Microsoft Windows 11 Version 25H2

    From 10.0.26200.0 · fixed in 10.0.26200.9711

  • Microsoft Windows 11 version 26H1

    From 10.0.28000.0 · fixed in 10.0.28000.3231

  • Microsoft Windows 11 Version 26H2

    From 10.0.26300.0 · fixed in 10.0.26300.9711

  • Microsoft Windows Server 2012

    From 6.2.9200.0 · fixed in 6.2.9200.26434

  • Microsoft Windows Server 2012 (Server Core installation)

    From 6.2.9200.0 · fixed in 6.2.9200.26434

  • Microsoft Windows Server 2012 R2

    From 6.3.9600.0 · fixed in 6.3.9600.23470

  • Microsoft Windows Server 2012 R2 (Server Core installation)

    From 6.3.9600.0 · fixed in 6.3.9600.23470

  • Microsoft Windows Server 2016

    From 10.0.14393.0 · fixed in 10.0.14393.9612

  • Microsoft Windows Server 2016 (Server Core installation)

    From 10.0.14393.0 · fixed in 10.0.14393.9612

  • Microsoft Windows Server 2019

    From 10.0.17763.0 · fixed in 10.0.17763.9376

  • Microsoft Windows Server 2019 (Server Core installation)

    From 10.0.17763.0 · fixed in 10.0.17763.9376

  • Microsoft Windows Server 2022

    From 10.0.20348.0 · fixed in 10.0.20348.5761

  • Microsoft Windows Server 2025

    From 10.0.26100.0 · fixed in 10.0.26100.33650

  • Microsoft Windows Server 2025 (Server Core installation)

    From 10.0.26100.0 · fixed in 10.0.26100.33650

References 1

msrc.microsoft.com