Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
CybersecurityAI-assisted

Microsoft Releases Out-of-Band Patch For Critical RRAS RCE Vulnerabilities in Windows 11

Microsoft released an out-of-band hotpatch update on Mon, Mar 13, 2026, addressing security vulnerabilities in Windows 11 versions 24H2 and 25H2.

Microsoft released an out-of-band hotpatch update on Mon, Mar 13, 2026, addressing security vulnerabilities in Windows 11 versions 24H2 and 25H2.

Identified as KB5084597, this update targets OS Builds 26200.7982 and 26100.7982, resolving three critical vulnerabilities in the Windows Routing and Remote Access Service (RRAS) management tool without requiring a device restart.

This hotpatch addresses vulnerabilities in the Windows RRAS component , a service managing remote connectivity and VPN functionality.

CVE-2026-25172 — A flaw in the RRAS management tool that allows a malicious remote server to disrupt services or execute arbitrary code. CVE-2026-25173 — A vulnerability with similar attack vectors, enabling remote code execution or denial-of-service conditions. CVE-2026-26111 — A security issue that increases the risk of the above flaws, potentially allowing code execution.

An attacker could set up a rogue server and wait for a user or administrator to connect using the RRAS management tool. Once connected, the attacker can disrupt operations or execute malicious code, posing significant risks in enterprise environments.

Microsoft released an out-of-band hotpatch update on Mon, Mar 13, 2026, addressing security vulnerabilities in Windows 11 versions 24H2 and 25H2.
Ryan Ellis · Thehackingpost

Hotpatches apply critical fixes to running processes in memory without requiring a system restart, reducing downtime for enterprise deployments. This update is available only for hotpatch-enabled devices, not for those receiving standard Windows updates.

The update includes the latest Servicing Stack Update (SSU) — KB5083532, version 26100.8035 — to ensure update infrastructure is current.

Windows 11, version 25H2 (OS Build 26200.7982) Windows 11, version 24H2 (OS Build 26100.7982) Both x64 and Arm64 architectures

For hotpatch-enabled devices, the update is automatically downloaded and installed via Windows Update. Administrators can access the package through the Microsoft Update Catalog or Server Update Services (WSUS).

Advertisement

Microsoft reports no known issues with this update. Devices with previous updates will only download the new changes.

Security teams should verify hotpatch functionality is enabled across eligible endpoints. Organizations relying on RRAS for remote access management should prioritize installing this update due to the risk of remote code execution.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories