CVE-2026-85339 HIGH

CVE-2026-85339: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Vendor Microsoft
Product Windows 10 Version 1607
Weakness CWE-191
Published October 13, 2026
Last update October 26, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

What the vulnerability does

01Description

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Key dates

02Disclosure timeline

October 13, 2026 CVE published
October 26, 2026 Record updated