CVE-2026-72939

mediumCVSS 6.5covered by 2 sourcesfirst seen 2026-09-08

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network.

⚡ Watch CVE-2026-72939

Get an email if CVE-2026-72939 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (2)

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-72939 status](https://www.csirts.com/badge/CVE-2026-72939)](https://www.csirts.com/cve/CVE-2026-72939)