Executive brief
Windows Routing and Remote Access Service (RRAS) is a critical component that enables remote connectivity and VPN functionality on Windows servers. A remote code execution vulnerability allows unauthenticated attackers to gain unauthorized access and execute arbitrary code on affected machines, potentially leading to complete system compromise, lateral movement, and data theft.
Technical details
This is a remote code execution vulnerability in the Windows Routing and Remote Access Service (RRAS). The vulnerability allows an unauthenticated attacker on the network to exploit a flaw in RRAS and execute arbitrary code with system privileges. The attack vector is network-based and does not require user interaction or prior authentication. Successful exploitation grants the attacker full control over the compromised system, enabling them to install malware, steal data, or use the machine as a pivot point for further attacks. Microsoft has released security updates to address this vulnerability.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed