MEDIUMVulnerability

CVE-2026-72931

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to deny service locally.

Properties

severity
MEDIUM
score
4.7
cve_id
CVE-2026-72931
signal_observed_at
2026-09-23T04:35:26+00:00
vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
published_at
2026-09-08T18:20:17.613
last_modified
2026-09-22T14:14:41.280

Related Entities (26)

AFFECTS_PRODUCT (24)

[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]

HAS_WEAKNESS (1)

[Weakness]Missing Release of Resource after Effective Lifetime

DESCRIBED_BY (1)

[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-72931 — Ninja Signal Threat Intelligence | Ninja Signal