CVE-2026-72931

—

CVSS 3.1

4.7 medium

EPSS

<1%p17

Published

Sep 8, 2026 (7d ago)

Modified

Sep 8, 2026

Description

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.

Weakness: CWE-772
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.