Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 6 products
| Date | Total | Labels |
|---|
| 2026-03-10 | 2 | Disclosure1Patch1 |
| 2026-03-11 | 1 | Patch1 |
| 2026-03-13 | 1 | Disclosure1 |
| 2026-03-15 | 2 | Patch2 |
| 2026-03-16 | 5 | Disclosure2Patch3 |
| 2026-03-17 | 2 | General1Patch1 |
| 2026-03-18 | 1 | Patch1 |
| 2026-03-19 | 2 | Patch2 |
| 2026-03-20 | 1 | Patch1 |
| 2026-03-21 | 1 | Patch1 |
| 2026-03-23 | 1 | Patch1 |
| 2026-03-25 | 1 | Patch1 |
| 2026-03-26 | 1 | Patch1 |
| 2026-03-31 | 1 | Patch1 |
| 2026-04-01 | 1 | Patch1 |
| 2026-04-05 | 1 | Patch1 |
| 2026-04-08 | 2 | Patch2 |
| 2026-04-11 | 2 | Patch2 |
| 2026-04-12 | 4 | Patch4 |
| 2026-04-13 | 3 | Patch3 |
| 2026-04-14 | 2 | Patch2 |
| 2026-04-19 | 1 | Patch1 |
| 2026-04-23 | 1 | Patch1 |
| 2026-04-28 | 1 | Patch1 |
| 2026-05-01 | 1 | Patch1 |
| 2026-05-05 | 1 | Patch1 |
| 2026-05-12 | 1 | Patch1 |
| 2026-05-17 | 1 | Patch1 |
| 2026-05-25 | 2 | Patch2 |
| 2026-06-08 | 1 | Patch1 |
| 2026-09-10 | 1 | Patch1 |
マイクロソフトがWindows 11向けに定例外ホットパッチ更新を配信。Windows Routing and Remote Access Service (RRAS)関連の脆弱性3件、CVE-2026-25172、CVE-2026-25173、CVE-2026-26111への対応。 https://cybersecuritynews.com/windows-11-out-of-band-update/
Post summary
Microsoft released an out‑of‑band hotpatch for Windows 11 that addresses three RRAS-related vulnerabilities (CVE‑2026‑25172, CVE‑2026‑25173, CVE‑2026‑26111).
Microsoft Releases Out-of-Band Patch For Critical RRAS RCE Vulnerabilities in Windows 11 https://cybersecuritynews.com/windows-11-out-of-band-update/ 『（直訳） 対処対象となる3つのCVEは以下のとおりです。 CVE-2026-25172 — RRAS管理ツールにおけるセキュリティ上の欠陥。悪意のあるリモートサーバーがサービス運用を妨害したり、接続されたデバイス上で任意のコードを実行したりすることが可能になる。 CVE-2026-25173 — 同様の攻撃手法を用いた関連するRRASの脆弱性。被害者が攻撃者制御のサーバーに接続した際に、リモートコード実行やサービス拒否状態を引き起こす可能性がある。 CVE-2026-26111 — 上記の脆弱性のリスクを悪化させるRRASのセキュリティ上の追加問題。適切な条件下ではコード実行が可能になる可能性がある。』
Post summary
The post announces Microsoft’s out‑of‑band patch for three critical RRAS RCE CVEs in Windows 11, outlining the vulnerability details but not mentioning active exploitation or PoC.
🛡️ CVE-2026-25172: El '#Hotpatch' urgente de Microsoft para #Windows11 que debes aplicar ya (Sin reiniciar) https://www.newstecnicas.com/2026/04/cve-2026-25172-hotpatch-windows-11-rras-kb5084597.html
Post summary
The post announces an urgent Microsoft hotpatch for CVE-2026-25172, urging Windows 11 users to apply it immediately without rebooting.
🛡️ CVE-2026-25172: El 'Hotpatch' urgente de Microsoft para Windows 11 que debes aplicar ya (Sin reiniciar) https://www.newstecnicas.info.ve/2026/04/cve-2026-25172-hotpatch-windows-11-rras-kb5084597.html
Post summary
The post announces Microsoft’s emergency hotpatch for CVE-2026-25172 on Windows 11, urging users to apply it immediately without rebooting.
Microsoft re-released hotpatch KB5084597 for Windows 11 24H2/25H2 & Enterprise LTSC 2024 to fix 3 RRAS RCE flaws (CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111) allowing a domain-authenticated attacker
Post summary
Microsoft re‑released hotpatch KB5084597 to address three RRAS RCE vulnerabilities (CVE‑2026‑25172, CVE‑2026‑25173, CVE‑2026‑26111) in Windows 11 24H2/25H2 and Enterprise LTSC 2024, preventing exploitation by domain‑authenticated attackers.
Windows RRAS の脆弱性 CVE-2026-25172／25173／26111 が FIX：緊急のホットパッチ提供 https://iototsecnews.jp/2026/03/15/microsoft-releases-out-of-band-patch-for-critical-rras-rce-vulnerabilities-in-windows-11/ Microsoft が、Windows 11 24H2／25H2 を対象とした、緊急の定例外ホットパッチ KB5084597 をリリースしました。今回の修正は、Windows の Routing and Remote Access Service (RRAS) 管理ツールに存在するメモリ管理の不備が原因となる、3 件のリモートコード実行 (RCE) 脆弱性に対処するものです。 RRAS は、企業ネットワークにおいて VPN 接続やルーティングを管理するための重要なコンポーネントです。修正された CVE-2026-25172／CVE-2026-25173／CVE-2026-26111 は、管理者が RRAS ツールを使用して外部サーバに接続する際に発動するものです。 攻撃者が悪意を持って構築した 偽の RRAS サーバに対して、管理者が接続を試みると、サーバからの不正な応答により、管理者のマシン上で任意のコード実行やサービス拒否 (DoS) が発生するというリスクがあります。ご利用のチームは、ご注意ください。 #CVE202625172 #CVE202625173 #CVE202626111 #Microsoft #RRAS #Vulnerability #Windows
Post summary
Microsoft issued an urgent hotpatch KB5084597 to address three RRAS RCE vulnerabilities (CVE‑2026‑25172, 25173, 26111) affecting Windows 11 24H2/25H2.
#Alerta Crítica CVE-2026-25172: Manual de aplicación del Hotpatch para RRAS en #Windows11 (+DETALLES) https://www.newstecnicas.info.ve/2026/03/microsoft-descarga-parche-kb5049217-windows-11-cve-2026-25172.html
Post summary
The post announces a hotpatch manual for CVE-2026-25172 on Windows 11, highlighting available remediation rather than exploitation details.
Top 5 Trending CVEs: 1 - CVE-2010-5139 2 - CVE-2026-24291 3 - CVE-2019-17571 4 - CVE-2025-47813 5 - CVE-2026-25172 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The tweet lists the top 5 trending CVEs but does not provide any additional information on exploitation, patching, or technical details.
BleepingComputer says the hotpatch is cumulative and follows March fixes for CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111.
Post summary
BleepingComputer reports that the cumulative hotpatch includes March fixes for CVE‑2026‑25172, CVE‑2026‑25173, and CVE‑2026‑26111, indicating a patch update for these vulnerabilities.
Microsoftが「KB5084597」を定例外でリリース ～「Hotpatch」でリモートコード実行 - 窓の杜 https://forest.watch.impress.co.jp/docs/news/2093553.html 、本パッチは、Windowsのリモート アクセス サービス（RRAS）管理ツールで発見されたリモートコードの脆弱性（CVE-2026-25172、CVE-2026-25173、CVE-2026-26111）に、（続く）
Post summary
Microsoft released the KB5084597 hotpatch to fix remote code execution vulnerabilities in the RRAS management tool, covering CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111.
CVE-2026-25172 Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. https://www.cve.org/CVERecord?id=CVE-2026-25172
Post summary
CVE-2026-25172 is an integer overflow issue in Windows Routing and Remote Access Service that permits unauthorized code execution over a network. No PoC, patch, or evidence of active exploitation is provided.
Microsoft releases out-of-band hotpatch KB5084597 to fix RRAS remote code execution flaws in Windows 11 Enterprise. The patch covers CVE-2026-25172, 25173, and 26111 with no reboot needed. #Windows11 #Hotpatch #USA https://ift.tt/m4QVtRS
Post summary
Microsoft released hotpatch KB5084597 to fix RRAS remote code execution flaws in Windows 11 Enterprise, covering CVE‑2026‑25172, 25173, and 26111 without requiring a reboot.
Microsoft's March 2026 Patch Tuesday addresses 84 vulnerabilities, including two public zero-days that demand immediate attention from CISOs. Prioritise patching critical RCE flaws in Windows RRAS (CVE-2026-25172) and SharePoint (CVE-2026-26106), as these align with common attack paths in real-world breaches. With over 40 elevation of privilege issues, focus your Sentinel triage on exploitation-more-likely CVEs like CVE-2026-24294 in SMB Server. Swift action bridges skills gaps in vulnerability management. #PatchTuesday #Cybersecurity
Post summary
Microsoft’s March 2026 Patch Tuesday highlights critical RCE and privilege‑elevation vulnerabilities in RRAS, SharePoint, and SMB Server, urging immediate patching to mitigate potential exploitation.
#Alerta Crítica CVE-2026-25172: Manual de aplicación del #Hotpatch para RRAS en #Windows11 (+DETALLES) https://www.newstecnicas.com/2026/03/microsoft-descarga-parche-kb5049217-windows-11-cve-2026-25172.html
Post summary
The tweet highlights CVE‑2026‑25172, linking to a Microsoft KB5049217 patch and a manual for applying the hotpatch to Windows 11 RRAS, indicating that a remediation solution is available.
🛡️ CVE-2026-25172: El '#Hotpatch' urgente de Microsoft para #Windows11 que debes aplicar ya (Sin reiniciar) https://www.newstecnicas.com/2026/04/cve-2026-25172-hotpatch-windows-11-rras-kb5084597.html
Post summary
El mensaje promociona el parche urgente de Microsoft para CVE-2026-25172 en Windows 11, aconsejando su aplicación sin reiniciar.
Alerta Crítica CVE-2026-25172: Manual de aplicación del Hotpatch para RRAS en Windows 11 (+DETALLES) https://www.newstecnicas.com/2026/03/microsoft-descarga-parche-kb5049217-windows-11-cve-2026-25172.html
Post summary
The article provides instructions to apply a Hotpatch to mitigate CVE‑2026‑25172 on Windows 11 RRAS, with no evidence of a PoC, exploit code, or active exploitation.
🛡️ CVE-2026-25172: El 'Hotpatch' urgente de Microsoft para Windows 11 que debes aplicar ya (Sin reiniciar) https://www.newstecnicas.com/2026/04/cve-2026-25172-hotpatch-windows-11-rras-kb5084597.html
Post summary
The text announces a Microsoft hotpatch for CVE‑2026‑25172, urging immediate installation on Windows 11 without reboot, with no evidence of exploitation or PoC.
🛡️ CVE-2026-25172: El '#Hotpatch' urgente de #Microsoft para #Windows11 que debes aplicar ya (Sin reiniciar) https://www.newstecnicas.com/2026/04/cve-2026-25172-hotpatch-windows-11-rras-kb5084597.html
Post summary
The post highlights the urgent Microsoft hotpatch for CVE‑2026‑25172 on Windows 11, urging users to apply it immediately without needing a reboot.
🛡️ CVE-2026-25172: El 'Hotpatch' urgente de #Microsoft para #Windows11 que debes aplicar ya (Sin reiniciar) https://www.newstecnicas.info.ve/2026/04/cve-2026-25172-hotpatch-windows-11-rras-kb5084597.html
Post summary
The article highlights an urgent hotpatch from Microsoft for Windows 11 to address CVE‑2026‑25172, urging users to apply it immediately without rebooting.
🛡️ CVE-2026-25172: El 'Hotpatch' urgente de Microsoft para Windows 11 que debes aplicar ya (Sin reiniciar) https://www.newstecnicas.info.ve/2026/04/cve-2026-25172-hotpatch-windows-11-rras-kb5084597.html
Post summary
Microsoft issued an urgent hotpatch for CVE-2026-25172 on Windows 11 that users should install immediately without rebooting.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2022_23h2 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | x64 |