CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-69590 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows...

·Source: NIST NVD

Updated:

Executive Summary

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Analysis

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine CVSS Score: 9.8. Published: 2026-09-08T18:19:29.310.

Indicators of Compromise (1)

CVE (1)
CVE-2026-69590
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 8, 2026. Verified by: NIST.

Related Threats

CRITICALZero Day

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

Possibly wormable bugs and two zero-day holes highlight the almost 1,000 fixes issued today by Microsoft in its September Patch Tuesday release . The 964 vulnerabilities, another record since Microsoft began using AI in the middle of the year to find holes, require customer action. Excluded are 174 third-party/open-source CVEs and 23 Chromium/Edge CVEs, as well as nine Microsoft mitigated vulnerab

CVE-2026-85880CVE-2026-81963
CSO Online
CRITICALRansomware

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday , including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published

CVE-2026-85880CVE-2026-81963
Rapid7
CRITICALVulnerabilityNEW

Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-uefi-flaw-exposes-systems-to-pre-boot-attacks-image_small-3-a-33252.jpg" align=right hspace=4><b>Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load</b><br>A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute c

CVE-2026-97631
Bank Info Security