SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-49791

HIGH · CVSS 7.1 EPSS 0.28%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

A vulnerability in Windows Routing and Remote Access Service (RRAS) allows authorized attackers to exploit improper link resolution before file access, enabling them to elevate their privileges locally. This high-severity issue poses a significant risk to systems running Windows, particularly in environments where RRAS is utilized. Organizations using Windows should prioritize patching this vulnerability to mitigate potential unauthorized access and privilege escalation risks.

CVE
CVE-2026-49791
Severity
HIGH
CVSS
7.1
EPSS
0.28%
Windows

Original NVD Description

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)