AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-61367

HIGH · CVSS 7.8 EPSS 0.28%

Source: NVD + CISA KEV + EPSS · Published 2026-08-11 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Windows Remote Desktop Services contains a vulnerability that allows an authorized attacker to elevate privileges locally due to missing authentication for critical functions. This high-severity flaw could enable attackers to gain unauthorized access to sensitive system resources, potentially compromising the integrity and confidentiality of the affected systems. Organizations utilizing Windows Remote Desktop Services should prioritize patching this vulnerability to mitigate the risk of exploitation.

CVE
CVE-2026-61367
Severity
HIGH
CVSS
7.8
EPSS
0.28%
Windows

Original NVD Description

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)