# CVE-2026-85792: Microsoft Windows Routing and Remote Access Service remote code execution

Source: https://junglewise.ai/threats/cve-2026-85792-remote-code-execution-in-windows-routing-and-remote-access  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-13. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-85792 · Severity: critical · CVSS 9.8 · Published 2026-10-13

The Windows Routing and Remote Access Service (RRAS) is a network connectivity component that enables remote users to access corporate networks. A critical remote code execution vulnerability in RRAS allows an attacker on the network to execute arbitrary code and fully compromise an affected system without requiring credentials or user interaction.

Technologies: [Microsoft Windows](https://junglewise.ai/threats/technologies/windows-), [Microsoft Windows 10 1607](https://junglewise.ai/threats/technologies/windows-10-1607), [Microsoft Windows 10 1809](https://junglewise.ai/threats/technologies/windows-10-1809), [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2), [Microsoft Windows 10 22h2](https://junglewise.ai/threats/technologies/windows-10-22h2), [Microsoft Windows 11 23h2](https://junglewise.ai/threats/technologies/windows-11-23h2), [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2), [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2), [Microsoft Windows 11 26h1](https://junglewise.ai/threats/technologies/windows-11-26h1), [Microsoft Windows 11 26h2](https://junglewise.ai/threats/technologies/windows-11-26h2), [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012), [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016), [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019), [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022), [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-85792 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85792 being exploited in the wild.

**How severe is CVE-2026-85792?** Critical severity, with a CVSS score of 9.8, published 13 October 2026.

**Which products and versions are affected?** Microsoft Windows.

**Is there a fix for CVE-2026-85792?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-85792 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-85792?** Check whether you run Microsoft Windows, Microsoft Windows 10 1607, Microsoft Windows 10 1809 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

RRAS contains a remote code execution vulnerability that can be exploited over the network. An attacker can send specially crafted requests to trigger code execution on a vulnerable system. The vulnerability does not require authentication or user interaction, making it easily exploitable in networked environments.

## Affected products

- Microsoft Windows

## Timeline

- 2026-10-13: disclosed

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85792](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85792)

## Related threats

- [Google Chrome privilege elevation in Installer on Windows](https://junglewise.ai/threats/cve-2026-110150-privilege-elevation-in-installer-in-google-chrome-on-on-windows)
- [Google Chrome incorrect authorization in Mojo sandbox escape](https://junglewise.ai/threats/cve-2026-110144-incorrect-authorization-in-mojo-in-google-chrome-on-on-windows)
- [Adobe Photoshop out-of-bounds write vulnerability](https://junglewise.ai/threats/cve-2026-97312-photoshop-desktop-is-affected-by-an-out-of-bounds-write)
- [Adobe Photoshop out-of-bounds write leading to arbitrary code execution](https://junglewise.ai/threats/cve-2026-96523-photoshop-desktop-is-affected-by-an-out-of-bounds-write)
- [Adobe Photoshop out-of-bounds write in file parsing](https://junglewise.ai/threats/cve-2026-96522-photoshop-desktop-is-affected-by-an-out-of-bounds-write)