CVE-2026-85926
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Risk Assessment
The lack of authentication makes this flaw especially dangerous — an attacker can remotely execute code and take control of the VPN server.
Recommendation
Immediately apply Microsoft patches for Windows SSTP and limit exposure of the SSTP service to public networks.
Other vulnerabilities in Windows Secure Socket Tunneling Protocol (SSTP)
See all- CVE-2026-73009Critical
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
- CVE-2026-88147High
A heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
- CVE-2026-71332High
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS