CVE-2026-85792

Summary

The vulnerability is a use-after-free flaw in Windows Routing and Remote Access Service (RRAS) that allows remote attackers to execute arbitrary code on affected systems with high privileges. This represents a critical security risk as it enables attackers to gain unauthorized access to victim machines without requiring authentication.

Exploitability

Exploitation appears straightforward with no special preconditions required, as the vulnerability is in a network service that typically accepts remote connections.

Blast radius

If exploited, this vulnerability could allow attackers to compromise entire Windows networks through the RRAS service, potentially leading to widespread system compromise and lateral movement across the organization.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version is published. Disable the RRAS service on all affected systems until a patch is available, or restrict network access to the RRAS endpoint to trusted sources only.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.